Data Management & Confidentiality

Research and Administrative Data Security Guidance

The University of Chicago’s guide to sensitive data storage and usage is posted The UChicago Sensitive Data Usage Guide  (UChicago login required).  This website describes allowable ways to store and share sensitive, identifiable information to minimize the likelihood of inadvertent disclosure of sensitive data and records.

Human Subject Confidential Information

To review details on which services the University of Chicago allows to process, transmit, or store human subject confidentiality information, please visit the Sensitive Identifiable Human Subject Research Data page  (UChicago login required).

Protected Health Information covered under HIPAA Regulations

Health Insurance Portability and Accountability Act (HIPPA) is considered a restricted data classification by the University of Chicago and its Protected Health Information (PHI) is all “individually identifiable health information” held or transmitted by a covered entity or its business associate, in any form or media, whether electronic, paper or oral.

The Protected Health Information page (UChicago login required) shows which services can and cannot be used to store and share PHI. 

Data Sharing/Use Agreements

University Research Administration requires and reviews Data Use Agreements (DUAs) both for data being provided to UChicago research team by third parties and for data being shared by UChicago research team with third parties -- University Research Administration has templates for creating a DUA if data will be shared with a third party including de-identified data.

Data Use Agreements (DUAs) are routed through University Research Administration for confirmation that the terms of the agreement do not restrict creation and dissemination/publication of knowledge, or contain other unacceptable terms.  Researchers do not sign a Data Use Agreement or Restricted Data License -- those agreements must be signed by the University's authorized official.  Third party data providers who share data with a UChicago research team should use their data use agreement templates.  Data being shared by UChicago research team with third parties ought to use the templates available at the Data Sharing Agreements page

Additional Resources

Data Stewardship Council

Human Resources Policy - Treatment of Confidential Information