{"id":185,"date":"2019-11-02T16:35:27","date_gmt":"2019-11-02T15:35:27","guid":{"rendered":"https:\/\/blogg.uit.no\/eni081\/?p=185"},"modified":"2019-11-02T16:48:56","modified_gmt":"2019-11-02T15:48:56","slug":"how-to-safely-save-personal-data","status":"publish","type":"post","link":"https:\/\/blogg.uit.no\/eni081\/2019\/11\/02\/how-to-safely-save-personal-data\/","title":{"rendered":"How to safely save personal data"},"content":{"rendered":"<p>I&#8217;ve been collecting survey data from students for my research. In some surveys I ask for the students&#8217; names or e-mail addresses. In order to protect the students&#8217; privacy and assure information security, this personal information cannot be saved together with the rest of the collected data.<\/p>\n<p>I therefore created an ID-number for each student, and made a &#8220;scrambling key&#8221; connecting this ID-number to their personal information. I replaced the students&#8217; personal information with these new ID-numbers in the survey data.<\/p>\n<p>I ended up with two documents &#8211; an anonymized data file, and a key with students&#8217; personal data and ID-numbers. These two documents cannot be saved together, because if a hacker finds them, they&#8217;ll be able to connect the two and find out how a particular student answered survey questions.<\/p>\n<p>The instructions from the Norwegian Centre for Research Data (NSD) do not specifically state how to hold the documents separate, and neither do UiT&#8217;s webpages on information security. Is it sufficient to save one file in Teams\/Sharepoint (<span class=\"ILfuVd\"><span class=\"e24Kjd\">cloud-based team collaboration software, where files can be stored and shared), <\/span><\/span>and another in OneDrive (the <span class=\"ILfuVd NA6bn\"><span class=\"e24Kjd\">online cloud storage service<\/span><\/span> used by UiT for sharing and editing files)? Both of these systems have the same username and password.<\/p>\n<p>I posed this question to IT support at UiT and received an answer several days later, after they discussed the issue. Since the two cloud storage systems, Teams\/Sharepoint and OneDrive, have the same login, they&#8217;re not considered separate entities. Someone with my password could compromise these storage locations and gain access to both documents.<\/p>\n<p>IT support&#8217;s recommendation was to save the survey data in one of the cloud storage systems (accessible on my PC), and the scrambling key on a memory stick (and <em>only<\/em> on the memory stick). This\u00a0 should be locked in a cabinet, physically removed from the rest of the data.<\/p>\n<p>So that&#8217;s exactly what I did, and what I recommend to others in similar situations. Better safe than sorry!<img fetchpriority=\"high\" fetchpriority=\"high\" decoding=\"async\" class=\"size-medium wp-image-186 aligncenter\" src=\"https:\/\/blogg.uit.no\/eni081\/wp-content\/uploads\/sites\/158\/2019\/11\/minnepinne-225x300.jpg\" alt=\"\" width=\"225\" height=\"300\" srcset=\"https:\/\/blogg.uit.no\/eni081\/wp-content\/uploads\/sites\/158\/2019\/11\/minnepinne-225x300.jpg 225w, https:\/\/blogg.uit.no\/eni081\/wp-content\/uploads\/sites\/158\/2019\/11\/minnepinne.jpg 705w\" sizes=\"(max-width: 225px) 100vw, 225px\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>I&#8217;ve been collecting survey data from students for my research. In some surveys I ask for the students&#8217; names or e-mail addresses. In order to protect the students&#8217; privacy and assure information security, this personal information cannot be saved together with the rest of the collected data. I therefore created an ID-number for each student, &hellip; <a href=\"https:\/\/blogg.uit.no\/eni081\/2019\/11\/02\/how-to-safely-save-personal-data\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">How to safely save personal data<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":260,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[1],"tags":[],"class_list":["post-185","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"featured_image_src":"","featured_image_src_square":false,"author_info":{"display_name":"Ellen Nierenberg","author_link":"https:\/\/blogg.uit.no\/eni081\/author\/ellen-nierenberg\/"},"rbea_author_info":{"display_name":"Ellen Nierenberg","author_link":"https:\/\/blogg.uit.no\/eni081\/author\/ellen-nierenberg\/"},"rbea_excerpt_info":"I&#8217;ve been collecting survey data from students for my research. In some surveys I ask for the students&#8217; names or e-mail addresses. In order to protect the students&#8217; privacy and assure information security, this personal information cannot be saved together with the rest of the collected data. I therefore created an ID-number for each student, &hellip; <a href=\"https:\/\/blogg.uit.no\/eni081\/2019\/11\/02\/how-to-safely-save-personal-data\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">How to safely save personal data<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a>","category_list":"<a href=\"https:\/\/blogg.uit.no\/eni081\/category\/uncategorized\/\" rel=\"category tag\">Uncategorized<\/a>","comments_num":"0 comments","_links":{"self":[{"href":"https:\/\/blogg.uit.no\/eni081\/wp-json\/wp\/v2\/posts\/185","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogg.uit.no\/eni081\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogg.uit.no\/eni081\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogg.uit.no\/eni081\/wp-json\/wp\/v2\/users\/260"}],"replies":[{"embeddable":true,"href":"https:\/\/blogg.uit.no\/eni081\/wp-json\/wp\/v2\/comments?post=185"}],"version-history":[{"count":2,"href":"https:\/\/blogg.uit.no\/eni081\/wp-json\/wp\/v2\/posts\/185\/revisions"}],"predecessor-version":[{"id":188,"href":"https:\/\/blogg.uit.no\/eni081\/wp-json\/wp\/v2\/posts\/185\/revisions\/188"}],"wp:attachment":[{"href":"https:\/\/blogg.uit.no\/eni081\/wp-json\/wp\/v2\/media?parent=185"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogg.uit.no\/eni081\/wp-json\/wp\/v2\/categories?post=185"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogg.uit.no\/eni081\/wp-json\/wp\/v2\/tags?post=185"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}