Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
dcc:pdpsol:pseudonymization [2026/05/12 14:05] marlondcc:pdpsol:pseudonymization [2026/05/13 13:25] (current) alba
Line 37: Line 37:
  
 ==== Managing the keyfile ==== ==== Managing the keyfile ====
-You must store the keyfile securely in your [[https://www.rug.nl/digital-competence-centre/it-solutions/store-and-archive/university-workplace-storage|X-Drive or Y-Drive]], separate from the research data. Strictly limit access to the keyfile, for example, by using an extra layer of encryption (e.g. using Excels' encryption functionality or [[..:itsol:veracrypt:|Veracrypt]]). This ensures that, even if the research dataset is shared or accessed by unauthorized parties, re-identification is only possible if the keyfile is also compromised. Keep track of who is authorized to access the keyfile, and if necessary (e.g. longitudinal research), ensure that there are two people who have access to the key in case one becomes unavailable. +You must store the keyfile securely in your [[https://www.rug.nl/digital-competence-centre/it-solutions/store-and-archive/university-workplace-storage|X-Drive or Y-Drive]], separate from the research data. Strictly limit access to the keyfile, for example, by using an extra layer of encryption (e.g. using Excel'encryption functionality or [[..:itsol:veracrypt:|Veracrypt]]). This ensures that, even if the research dataset is shared or accessed by unauthorized parties, re-identification is only possible if the keyfile is also compromised. Keep track of who is authorized to access the keyfile, and if necessary (e.g. longitudinal research), ensure that there are two people who have access to the key in case one becomes unavailable. 
  
 Only maintain a link between your research data and the individuals involved if necessary. Do not retain the keyfile longer than necessary for your research (e.g., [[https://www.rug.nl/digital-competence-centre/privacy-and-data-protection/gdpr-research/rights-of-human-data-subjects-in-scientific-research|exercising data subjects’ rights]] or informing data subjects about the research). Only maintain a link between your research data and the individuals involved if necessary. Do not retain the keyfile longer than necessary for your research (e.g., [[https://www.rug.nl/digital-competence-centre/privacy-and-data-protection/gdpr-research/rights-of-human-data-subjects-in-scientific-research|exercising data subjects’ rights]] or informing data subjects about the research).