Future of University of Edinburgh trusted research environments

For the past few years, Information Services (ISG) have been providing a University Data Safe Haven (DSH) service, to host analysis of sensitive research data.  Alongside this, Edinburgh Parallel Computing Centre (EPCC) have been delivering national services such as the Scottish National Safe Haven, run on behalf of Public Health Scotland.

EPCC is a key partner in the Data Driven Innovation programme (DDI), and is funded through the Edinburgh and South East Scotland City Region Deal to deliver the Edinburgh International Data Facility. This will provide similar trusted research environments, such as the DataLoch.

The purpose for which the University DSH service was constructed is now converging with the services which EPCC will be providing as part of the EIDF.  ISG and EPCC are now working together to rationalise how these services are provided into the future.

The EIDF and ISG DSH teams will now begin looking at detailed plans for supporting current and future users and the University DSH will stop accepting further projects for on-boarding from 18 June, 2021. Timeframes for research project migrations, where necessary, will be decided on a case by case basis in consultation with principal investigators.  We will be contacting all current University DSH project owners to discuss their service provision, and we will similarly contact project owners who were investigating using the University DSH.

For further information contact Robin Rice, Research Data Service Owner (r.rice@ed.ac.uk), Information Services or Rob Baxter, Director of Data Services, EPCC (r.baxter@epcc.ed.ac.uk).

End of an era – 2017-2020 RDM Roadmap Review (part 1)

Looking back on three years that went into completing our RDM Roadmap in this period of global pandemic and working from home, feels a bit anti-climactic. Nevertheless, the previous three years have been an outstanding period of development for the University’s Research Data Service, and research culture has changed considerably toward openness, with a clearer focus on research integrity. Synergies between ourselves as service providers and researchers seeking RDM support have never been stronger, laying a foundation for potential partnerships in future.

thumbnail image of poster

FAIR Roadmap Review Poster

A complete review was written for the service steering group in October last year (available on the RDM wiki to University members). This was followed by a poster and lightning talk prepared for the FAIR Symposium in December where the aspects of the Roadmap that contributed to FAIR principles of research data (findable, accessible, interoperable, reusable) were highlighted.

The Roadmap addressed not only FAIR principles but other high level goals such as interoperability, data protection and information security (both related to GDPR), long-term digital preservation, and research integrity and responsibility. The review examined where we had achieved SMART-style objectives and where we fell short, pointing to gaps either in provision or take-up.

Highlights from the Roadmap Review

The 32 high level objectives, each of which could have more than one deliverable, were categorised into five categories. In terms of Unification of the Service there were a number of early wins, including a professionally produced short video introducing the service to new users; a well-designed brochure serving the same purpose; case study interviews with our researchers also in video format – a product of a local Innovation Grant project; and having our service components well represented in the holistic presentation of the Digital Research Services website.

Gaps include the continuing confusion about service components starting with the name ‘Data’___ [Store, Sync, Share, Vault]; the delay of an overarching service level definition covering all components; and the ten-year old Research Data Policy. (The policy is currently being refreshed for consultation – watch this space.)

A number of Data Management Planning goals were in the Roadmap, from increasing uptake, to building capacity for rapid support, to increasing the number of fully costed plans, and ensuring templates in DMPOnline were well tended. This was a mixed success category. Certainly the number of people seeking feedback on plans increased over time and we were able to satisfy all requests and update the University template in DMPOnline. The message on cost recovery in data management plans was amplified by others such as the Research Office and school-based IT support teams, however many research projects are still not passing on RDM costs to the funders as needed.

Not many schools or centres created DMP templates tailored to their own communities yet, with the Roslin Institute being an impressive exception; the large majority of schools still do not mandate a DMP with PhD research proposals, though GeoSciences and the Business School have taken this very seriously. The DMP training our team developed and gave as part of scheduled sessions (now virtually) were well taken up, more by research students than staff. We managed to get software code management into the overall message, as well as the need for data protection impact assessments (DPIAs) for research involving human subjects, though a hurdle is the perceived burden of having to conduct both a DPIA and a DMP for a single research project. A university-wide ethics working group has helped to make linkages to both through approval mechanisms, whilst streamlining approvals with a new tool.

In the category of Working with Active Data, both routine and extraordinary achievements were made, with fewer gaps on stated goals. Infrastructure refreshment has taken place on DataStore, for which cost recovery models have worked well. In some cases institutes have organised hardware purchases through the central service, providing economies of scale. DataSync (OwnCloud) was upgraded. Gitlab was introduced to eventually replace Subversion for code versioning and other aspects of code management. This fit well with Data and Software Carpentry training offered by colleagues within the University to modernise ways of doing coding and cleaning data.

A number of incremental steps toward uptake of electronic notebooks were taken, with RSpace completing its 2-year trial and enterprise subscriptions useful for research groups (not just Labs) being managed by Software Services. Another enterprise tool, protocols.io, was introduced and extended as a trial. EDINA’s Noteable service for Jupyter Notebooks is also showcased.

By far and away the most momentous achievement in this category was bringing into service the University Data Safe Haven to fulfil the innocuous sounding goal of “Provide secure setting for sensitive data and set up controls that meet ISO 27001 compliance and user needs.” An enormous effort from a very small team brought the trusted secure environment for research data to a soft launch at our annual Dealing with Data event in November 2018, with full ISO 27001 standard certification achieved by December 2019. The facility has been approved by a number of external data providers, including NHS bodies. Flexibility has been seen as a primary advantage, with individual builds for each research project, and the ability for projects to define their own ‘gatekeeping’ procedures, depending on their requirements. Achieving complete sustainability on income from research grants however has not proven possible, given the expense and levels of expertise required to run this type of facility. Whether the University is prepared to continue to invest in this facility will likely depend on other options opening up to local researchers such as the new DataLoch, which got its start from government funding in the Edinburgh and South East Scotland region ‘city deal’.

As for gaps in the Working with Data category, there were some expressions of dissatisfaction with pricing models for services offered under cost recovery although our own investigation found them to be competitively priced. We found that researchers working with external partners, especially in countries with different data protection legislation, continue to find it hard work to find easy ways to collaborate with data. Centralised support for databases was never agreed on by the colleges because some already have good local support. Encryption is something that could benefit from a University key management system but researchers are only offered advice and left to their own mechanisms not to lose the keys to their research treasures; the pilot project that colleagues ran in this area was unfortunately not taken forward.

In part 2 of this blog post we will look at the remaining Roadmap categories of Data Stewardship and Research Data Support.

Robin Rice
Data Librarian and Head of Research Data Support
Library and University Collections

Data Safe Haven new remote access feature

Hands on laptop with coffee

Working from home

The Research Data Service team is pleased to announce the availability of a new remote access feature of the University of Edinburgh Data Safe Haven (DSH). In response to the changing working practices due to the Covid-19 pandemic, the DSH technical team in ITI Research Services has completed a significant work package to develop secure remote access arrangements for the environment. A secure third party solution that allows remote access to the DSH server will allow users to remotely access data from end-point devices that sit outside of the University network. The solution provides enhanced security beyond that provided by the VPN connection used for normal remote working. At present our remote access facility is being used by our existing research projects. For new projects this facility will be discussed on a project by project basis. The solution was confirmed at our ISO 27001 certification surveillance visit in November.

Cuna Ekmekcioglu
Data Safe Haven Manager
Library & University Collections

DataVault ‘at 100’ – stories from our users

The DataVault now contains over one hundred datasets, with a combined size of over one hundred terabytes. These are the stories of a handful of our happy customers, talking about the benefits of using the DataVault…

1.    Low-cost long term storage delivers flexibility

Emily Clark (PI) and Mazdak Salavati (Core Scientist)

Emily and Mazdak heard about the DataVault at an event at the Roslin Institute organised by Colin Simpson, local project officer, and expert user of the DataVault. They needed to archive a large amount of genomics data – more than three terabytes. They wanted to save money and liberate their active storage for other data by moving the files from DataStore to DataVault. As DataVault is much cheaper than DataStore (once you’ve used up your initial free DataStore quota). We also held an initial meeting with Colin to answer their questions about how they would be billed (via an eIT), who would be able to deposit and retrieve data and how. Emily wanted flexibility around the billing, and the control to restrict access. We discussed the usefulness of splitting the data into separate deposits, to enable subsets of the data to be exported back to DataStore. As you can see from the public metadata, link below, the information has been worded in such a way as to manage the expectations of the reader appropriately. Mazdak created the vault, gave Emily access, and then deposited the data as a series of separate deposits, over a few days. We then issued the eIT for payment.

Mazdak says:

“Engaging early and reading the documentation was key for the use of DataVault. Having a research data management (RDM) plan from the beginning of your project helps with almost every aspect of dissemination of it i.e. publication, grant reports, collaborators and stakeholders etc. Understanding the types of storage and their cost makes this planning much easier for both the PIs and the data processors involved. Moreover, curating the metadata associated with biological datasets is much easier once the RDM plan is based on a streamlined platform such as DataVault. The clever use of low-cost long term storage solutions can free up lots of flexibility both in consumables and computational resources if considered from the start of every project. The DataVault is maintained and supported by very dedicated folks at the University who would their best to help and accommodate research needs. Talk to them in the earliest point possible to discuss your RDM plan and take advantage of their support.”

You can see the public details of the data by clicking on the DOI:

2.    A safe place for personal data

Professor Sue Fletcher-Watson

Sue had a set of video footage gathered as part of her work with children with autism, specifically the Click-East clinical trial. The audio-visual files, a little over a terabyte, were stored on an external hard drive, so she wanted to have them safely backed up, but did not have sufficient spare storage in her DataStore area. Sue had learned about the Edinburgh DataVault when chatting with a member of our team at an IAD event, so she knew DataVault would be an appropriate home for this sensitive data to be stored for the ten year period to which the participants’ parents had consented; the DataVault encrypts the data and stores three copies, and is cheaper than buying additional DataStore storage. Information Services provided Sue with a temporary ‘staging area’ on DataStore free of charge to accommodate the transfer of the data from the external hard drive, first onto the DataStore staging area and then into the vault she created, after first creating a Pure record which we validated. The Research Data Support team now has a similar dedicated staging area on DataStore which we can make available to those users who need the space temporarily for a DataVault deposit or retrieval. Of course, datasets should be split into deposits of an appropriate size so that the retrieval need not occupy too much space on DataStore. Sue successfully deposited the data. And later was able to use the staging area again to retrieve the data.

“The support I got from the DataVault team was exemplary and really helped me with this first deposit. I now have complete confidence that these valuable data are safe and secure. I’ll certainly be using DataVault again”

3.    Facilitating restricted sharing and citation of clinical data

An anonymous Edinburgh researcher

One research team contacted us about getting a DOI (Digital Object Identifier) for their pseudonymised clinical data, so they could cite the data in their manuscript, and so they could share the data on a restricted basis with their reviewers. We advised that while the reviewers would not be able to access the DataVault directly, the researchers could use DataSync to share an encrypted copy of the data with them, while protecting the anonymity of the reviewers, by sending the link for DataSync to the journal, for forwarding on to the editors. We helped the researchers describe their data in Pure. The researchers archived the data into DataVault. We minted a DOI on the Pure record, which the researchers then added into their manuscript and is now included in the finished publication. Of course, clicking on the DOI link does not give users direct access to the data – it merely takes them to the metadata, the description, on Pure’s public portal, the Edinburgh Research Explorer, where they can find the information they need to make a request for the data. Thus the research team still has the control, so that they can decline a request, or they can require such external researchers to sign a Data Sharing Agreement, undertaking not to attempt to re-identify any participants nor to share the data further with others.

A note on Data Protection

It is important to keep in mind that Principal Investigators are responsible for understanding and complying with data protection law and their own funders’ and collaborative partners’ requirements. The DataVault should be used as part of good practice in research data management throughout the research data lifecycle. We strongly encourage researchers to make a Data Management Plan for every project; the Research Data Support team is happy to review your Data Management Plan, provide feedback, advise whether the DataVault would be a suitable solution, and help include the associated costs in your research bid.

Pauline Ward
Research Data Support Assistant
Library and University Collections