Maximise your project’s data security: Comparing EPCC safe haven services and EIDF’s confidential data workspace

This blog post explains the choice between EPCC Safe Haven services and EIDF's confidential data workspace for handling sensitive data. Safe Haven is ideal for unconsented identifiable data, providing stringent security, while EIDF's workspace is sufficient for de-identified or consented data, offering flexibility with secure handling. Decision factors include cost, data owner's stipulations, and compliance with licensing agreements. For detailed analysis and guidance, consult EPCC services.

Comparing EPCC safe haven services and EIDF’s confidential data workspace

When working with sensitive or special category data, it's crucial to choose the right environment to ensure compliance with legal and ethical standards. Prospective users of EPCC resources often face the decision of whether to use Safe Haven services or EIDF’s confidential data workspace, often thinking a Safe Haven is the only option for the dataset they hold. Although the final decision largely depends on the data owner and relevant licensing agreements, there are general guidelines to help you make an informed choice.

When to consider Safe Haven services

Handling unconsented identifiable special category data.

Safe Haven services are designed to manage data containing unconsented identifiable information related to categories such as health, racial, or ethnic backgrounds. These services provide a high level of security and are tailored to meet strict compliance measures. If your data falls into this category, a Safe Haven is generally the most suitable option due to its specialised security measures and infrastructure.

When the EIDF confidential data workspace may be sufficient

Working with de-identified or consented data.

For data that has been de-identified or where there is consent from individuals to use their data, the EIDF confidential data workspace are usually adequate. These environments are secure and capable of handling such data but do not have the same extensive security protocols as Safe Haven services, making them a more flexible and less intensive option.

Considerations of cost

It's also important to consider the cost implications of your choice. Safe Haven services typically involve higher costs due to their specialised management and operational requirements. These costs reflect the advanced security and compliance measures necessary for handling highly sensitive data. Allocating budget effectively is essential, and understanding the financial impact of using Safe Haven services versus the EIDF confidential data workspace is part of this decision-making process.

Making the right choice

Before finalising your decision on which environment to use for your data:

  • Consult with the data owner. Make sure you understand any specific restrictions or requirements they may have.
  • Review licensing agreements. Ensure the choice of data-handling environment complies with applicable licensing agreements, particularly regarding data security and privacy.

Selecting the right environment for data handling goes beyond compliance and security; it’s about protecting the integrity and confidentiality of your data throughout your project’s lifecycle. By thoughtfully evaluating your data’s nature and requirements, you ensure you choose the infrastructure that best supports your research. For further guidance, consult EPCC services for a detailed comparison between the EPCC Safe Haven services and the EIDF confidential data workspace. 

Publication date