Data protection, privacy, and confidentiality: Difference between revisions

== Does Compute Canada offer any resources dedicated to handling personal data, private data, or sensitive data, such as (for example) human clinical research data? == <!--T:1-->

We don’t run any resource that is specifically designated for sensitive data at this time.  

Our resources are all administered following best practices for academic research systems, and we devote considerable effort to ensuring data integrity, confidentiality, and availability.  However, none of the resources is formally certified as meeting specific security or privacy assurance levels which may be required for certain datasets. For the most part, we provide shared resources, shared networks, shared nodes, shared memory, and data is not guaranteed to be encrypted at rest. We offer the standard Linux filesystem segregation and access control to files and directories, and our sysadmins do have access to all this material when necessary or when authorized by their owners.  

Responsibility for data protection and data privacy rests ultimately with the researcher. Please see Privacy and Data Protection Policy section 5.2, and Terms of Use paragraph 3.12, at https://ccdb.computecanada.ca/agreements/user_index.  

== What does Compute Canada do to protect my data against hardware failure? == <!--T:6-->

== What does Compute Canada do to protect my data against unauthorized access? == <!--T:8-->

To protect against unauthorized access through hardware, only approved personnel can physically access the infrastructure. Storage devices which are removed due to hardware failure are either destroyed or already encrypted or erased before being returned to the vendor for a replacement.