Sensitive research data: Reuse of research data published under controlled access

We have found new studies that have just been published and want to access the original datasets used in these studies because they seem very interesting and might be helpful in our research. We found the studies via the EGA webpage, Etsin or Pubmed.
Guidelines for data access illustrate that the datasets contain sensitive data. They are stored in Finland in the Federated EGA service under controlled access and are accessible for reuse with CSC’s Sensitive Data services. We also want to combine these datasets with our findings and use specific software and scripts during the analysis.
CSC offers services for managing data in all phases of the research project. As in this case, we want to access sensitive data published under controlled access, we can use:
- MyCSC portal for creating an account and CSC project.
- SD Apply for applying for access rights to the data.
- SD Desktop for accessing and analyzing the data.
- SD Connect for importing scripts, software or other data into the secure environment.
If you are new to CSC’s services, it may take around three days to familiarize yourself with our services. If you encounter any issues, please don’t hesitate to contact us, we can support you step-by step during this process, for example via online meetings.
Find the dataset of interest
Log in to SD Apply service and find the dataset that you want to access from the catalogue. You can find the datasets stored in the Finnish Federated EGA service under the FEGA category.
SD Apply service description Apply access to FEGA data (Docs)Fill in the application and agree to terms of use
Fill in the required details on the application form and agree to the terms of use the data controller has defined for data access. Consult your organization’s legal support when necessary. Your application will be forwarded to a Data Access Committee (DAC) appointed by the data controller, who will review your access request and approve or reject it.
Fill application (Docs)Create a CSC account and a CSC project
After you have received an email confirming your application was approved, create a CSC account and set up a CSC project to access the Sensitive Data Services needed for data analysis. In MyCSC portal, activate service access to SD Desktop and SD Connect and enable two-step verification for your account.
Accessing Sensitive Data services (Docs)Data Protection
You also need to complete the Description of Processing Activity form if your project handles personal data, ensuring compliance with European data protection regulations. If transferring data outside the EEA, confirm legal requirements; for assistance, consult your organization’s legal office using documents provided here.
Data protection (Docs)Access data in SD Desktop
Create a virtual desktop to access the data. You and your project members can automatically access the datasets you were granted access to only in the virtual desktop. When not in use, the desktop can be paused to optimize resources.
SD Desktop service description Create virtual desktop (Docs) Import data to virtual desktop (Docs)Upload data and software with SD Connect
The virtual desktop can be customized by importing specific software, either provided by CSC (no experience required) or prepared programmatically by you (advanced), via SD Connect. SD Connect encrypts the uploaded files automatically, and they can be imported to SD Desktop for analysis. Note: Only open-source software is available in SD Desktop.
SD Connect service description Upload data to SD Connect (Docs)Export results
At the end of your analysis, the Project PI (CSC Project Manager) can export non–sensitive findings from SD Desktop to SD Connect and delete the virtual desktop and any copies of data imported to it. Note that when the access period granted by the Data Access Committee via SD Apply expires, the datasets will no longer be visible or accessible to you in SD Desktop.
Export data from virtual desktop (Docs)Close your project
The default lifetime of a CSC project is one year. You can extend the project if needed or close it in the MyCSC portal. Once the project is expired or is closed, all data, including files, virtual desktops, and volumes stored in SD Connect or SD Desktop, will be permanently deleted 90 days after project closure or expiration.
Closing your project and data retention (Docs)Images: CSC, Google Fonts