Research Data Management

What is the risk level of my research data?

Generally speaking, the risk level of your data relates to the sensitivity of your data. The following data classifications  have been adapted from UWinnipeg's Information Security Policy and Procedures, for the purposes of this guide. The bolded sections below reflect adaptations to the policy and procedures, for the purpose of clarity for the UW research community, and have been reviewed by UWinnipeg's Executive Director, IT Planning and Governance.

From the policy: "...As the University is committed to safeguarding to a high degree the University, the University Community, and third parties against harm, the academic research data of University employees, post-doctoral fellows, visiting scholars, interns, and students is University Data for the purposes of this Policy."

Public: University Data that is freely disclosed to the public or would cause no harm if so disclosed. For example:

• Research University Data made available to the public.

Internal: University Data that is not protected by law, agreement, or industry regulation, but may cause minor harm to the University or others if disclosed indiscriminately or beyond a need-to-know basis. For example: 

• University Data intended for the sole use of the University, e.g.:
  • budget and accounting figures;
  • office procedures and manuals;
  • building plans;
  • work cell phone numbers;
• employee-specific email addresses, e.g., j.doe@uwinnipeg.ca; and

Sensitive: University Data that must be protected by law, agreement, research protocol, or industry regulation; exposes non-public details of a University system; or may cause moderate harm to the University or others if disclosed to unauthorized individuals. For example:

• Anonymous, anonymized, or coded human research data that is deemed sensitive (as defined above);
• Personal information that is not classified as Highly Sensitive, such as contact information (ex. name, phone number, and email) of research participants;
• Research documents intended for use by only the Principal Investor or research team (ex. signed consent forms).

Highly Sensitive: University Data that must receive a high degree of protection by law, agreement, research protocol, or industry regulation; exposes non-public details of a critical University system; or may cause considerable harm to the University or others if disclosed to unauthorized individuals. For example: 

• Highly sensitive personal information, e.g.: Personal Health Information, accessibility and counselling information, social insurance number, biometric identifies including finder and voice prints and full-face images, race or ethnic origin, political or religious beliefs or membership, genetic information, sexual orientation or sex life, criminal records checks;
• Research University Data is that Highly Sensitive (as defined above). 

For questions about the Policy, or questions about the risk level of your data, you can reach out to the Information Security Working Group (ISWG) at ISWG@uwinnipeg.ca or  UWinnipeg's Research Data Management Librarian.

How do I securely handle (access, storage, share and delete) my research data?

UWinnipeg's Information Security Procedures outline the following security handing requirements:

*UWinnipeg's Research Storage is a research data storage service offered by UWinnpeg's Tech Sector. This service is available to all UWinnipeg researchers. The frontend of this service is NextCloud. For questions, contact UWinnipeg's Tech Sector via MyServiceDesk. Select Service Request -> Research -> Research Storage on the form.