Trusted research environments, or TREs, are highly secure computing environments through which approved researchers can access pseudonymised data and work on approved projects of public benefit. Within Scotland, TREs are often referred to as data safe havens while in other nations, TREs are sometimes known as secure data environments.
TREs provide a single location for researchers to access datasets securely and perform their analysis using a range of software and tools.
This enables secure, efficient, collaborative and cost-effective research. Data cannot be downloaded or extracted from TREs and must be analysed within the TRE’s secure environment. By making datasets available through a TRE, members of the public can be confident that their personal data will be accessed in a secure way that ensures their privacy is protected.
Accessing Trusted Research Environments (TREs)
To gain access to a TRE, researchers must have appropriate approvals in place for their projects and must be named in the data access application and/or data sharing agreement. Access to TREs will vary on a case-by-case basis depending on the types of datasets a researcher requests as well as the associated permissions.
Remote access
Subject to gaining the necessary approvals, there are various options for researchers to gain secure access to datasets remotely through digital safe settings – controlled online portals with enhanced security measures to prevent unauthorised use. In some cases, researchers will be granted remote access to a TRE using a virtual private network (VPN), with additional security measures including a two-factor authentication process to confirm the researcher’s identity before they can access data.
Remote access methods and requirements will vary between TREs and will depend on the nature of the research project and the data required. For more details on remote access, please contact the eDRIS support team or relevant TRE.
Physical access
Subject to gaining the necessary approvals, there are several options for researchers to gain physical access to TREs through safe settings – secure facilities that prevent unauthorised use. Physical access will depend on the types of provisions available and how services are set up within a specific TRE.
A data controller may require that their data is only accessed through a secure access point to ensure data security. A secure access point is a dedicated computer in a physically secure area where no external devices can be used or connected. The secure access point does not connect to the internet, nor can it be accessed remotely.
SafePod Network
Several institutions across the UK provide researchers with secure data access via the SafePod Network, which deploys standardised SafePods, a type of safe setting. While eDRIS is working towards registering the Scottish National Safe Haven with the SafePod Network to increase the number of data access points, you can view which institutions currently provide SafePod access through the SafePod Network website.
