| 1. |
Data Custodians must ensure individuals are appropriately trained in data governance and/or have the relevant skills and experience and supported to effectively use the data for the proposed purpose. TRE providers must be able to verify the researchers' status and experience in handling sensitive data |
DC |
| 2. |
Individuals and organisations party to undertaking the project must disclose all affiliations |
RE |
| 3. |
Individuals must disclose funding/sponsorship information, commercial interests and any conflicts of interests |
RE |
| 4. |
Individuals must disclose their history of safe data use |
RE |
| 5. |
All individuals have signed an agreement or legally binding undertaking which governs that access and use of the data |
RE |
| 6. |
All organisations acting as data controllers have disclosed their data security and protection process and are able to manage data breach risks effectively |
SO |
| 7. |
All individuals are authenticated and authorised to access the data |
TA |