{"id":145543,"date":"2023-05-10T10:11:48","date_gmt":"2023-05-10T14:11:48","guid":{"rendered":"http:\/\/www.bu.edu\/tech\/?page_id=145543"},"modified":"2025-10-17T14:35:50","modified_gmt":"2025-10-17T18:35:50","slug":"data-classification-services","status":"publish","type":"page","link":"https:\/\/www.bu.edu\/tech\/support\/information-security\/security-for-researchers\/data-classification-services\/","title":{"rendered":"Data Classification and Services"},"content":{"rendered":"<h1>Research Protocol Confidentiality Section<\/h1>\n<p><em><strong>Paper documents<\/strong><\/em> &#8211; Information collected on paper, such as screening information, is stored in a locked file cabinet that only the research team has access to.<\/p>\n<p><em><strong>Electronic Data<\/strong><\/em> &#8211; The following sections identify what services are appropriate for each data classification. Generally, research teams will store identifiable health information and any codes (matrix of research subjects and their assigned Subject ID) in Restricted Use services and process anonymized data (e.g., Confidential HIPAA Limited Data Set) on a powerful BU managed computer or the MGHPCC Shared Computing Cluster. Data classified as Confidential must be processed on SCC4; SCC1-3 can be used for data classified as Internal or Public.<\/p>\n<p>&nbsp;<\/p>\n<p><strong><span data-ogsc=\"rgb(51, 51, 51)\"><div class=\"bu_collapsible_container \" aria-live=\"polite\" data-customize-animation=\"false\"><h3 class=\"bu_collapsible\" aria-expanded=\"false\"tabindex=\"0\" role=\"button\">Restricted Use<\/h3><div class=\"bu_collapsible_section\" style=\"display: none;\"><\/span><\/strong><\/p>\n<p><strong><span data-ogsc=\"rgb(51, 51, 51)\">Restricted Use<\/span><\/strong><\/p>\n<ul>\n<li><strong>Data\u00a0<\/strong>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"15\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"1\">\n<div>\n<div>HIPAA or personally identifiable health information used in research, such as Human Subjects Data<\/div>\n<\/div>\n<\/li>\n<li>financial\/PII, such as SSN, driver license #, checking account # or debit\/credit card # (even w\/o pin)<\/li>\n<\/ul>\n<\/li>\n<li><strong>Services<\/strong>\n<ul>\n<li><span data-contrast=\"auto\">BU Office365 apps, such as SharePoint, OneDrive, Teams,\u00a0<\/span><span data-contrast=\"auto\">PowerBI<\/span><\/li>\n<li data-leveltext=\"o\" data-font=\"Courier New\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"2\" data-aria-level=\"2\"><span data-contrast=\"auto\">BU\u00a0<\/span><span data-contrast=\"auto\">REDCap<\/span><span data-contrast=\"auto\">\u00a0or Qualtrics<\/span><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<li data-leveltext=\"o\" data-font=\"Courier New\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"3\" data-aria-level=\"2\"><span data-contrast=\"auto\">BU Zoom or Zoom meetings for HIPAA Components<\/span><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<li data-leveltext=\"o\" data-font=\"Courier New\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"2\"><span data-contrast=\"auto\">BU\u00a0<\/span><span data-contrast=\"auto\">Restricted Use\u00a0<\/span><span data-contrast=\"auto\">network drive<\/span><span data-contrast=\"auto\">\u00a0(BUMC Y Drive)<\/span><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li data-leveltext=\"o\" data-font=\"Courier New\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"2\">BU Restricted Use <a href=\"https:\/\/www.bu.edu\/tech\/services\/infrastructure\/server-infrastructure\/virtual-private-cloud\/\">Premium Secure Server*\u00a0<\/a><\/li>\n<li data-leveltext=\"o\" data-font=\"Courier New\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"2\"><span>BU Restricted Use <a href=\"https:\/\/www.bu.edu\/tech\/support\/information-security\/security-for-researchers\/\">Service<\/a><\/span><\/li>\n<\/ul>\n<\/li>\n<li data-leveltext=\"o\" data-font=\"Courier New\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"2\"><strong>Devices\u00a0<\/strong>\n<ul>\n<li data-leveltext=\"o\" data-font=\"Courier New\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"2\">BU Managed device with current OS and encryption enabled<\/li>\n<li data-leveltext=\"o\" data-font=\"Courier New\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"2\">Send email to <a href=\"mailto:bumchelp@bu.edu\">bumchelp@bu.edu<\/a> to confirm all devices comply with the BU Secure End Point Standard<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><strong><\/div>\n<\/div>\n<\/strong><\/p>\n<p><strong><span data-ogsc=\"rgb(51, 51, 51)\"><div class=\"bu_collapsible_container \" aria-live=\"polite\" data-customize-animation=\"false\"><h3 class=\"bu_collapsible\" aria-expanded=\"false\"tabindex=\"0\" role=\"button\">Confidential (HIPAA Limited Data Set)<\/h3><div class=\"bu_collapsible_section\" style=\"display: none;\"><\/span><\/strong><\/p>\n<p><strong><span data-ogsc=\"rgb(51, 51, 51)\">Confidential (HIPAA Limited Data Set)<\/span><\/strong><\/p>\n<ul>\n<li><strong>Data\u00a0<\/strong>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"15\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"1\">HIPAA Limited Data Set provided by a HIPAA Entity \u2013 such as BMC or another hospital. <a href=\"https:\/\/privacyruleandresearch.nih.gov\/pr_08.asp#:~:text=The%20Privacy%20Rule%20does%20not,made%20according%20to%20an%20Authorization.\">NHL guidance on using HIPAA data in research.*<\/a><\/li>\n<\/ul>\n<\/li>\n<li><strong>Services<\/strong>\n<ul>\n<li data-leveltext=\"o\" data-font=\"Courier New\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"2\">All services listed above in Restricted Use<\/li>\n<li data-leveltext=\"o\" data-font=\"Courier New\" data-listid=\"11\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"2\"><span data-contrast=\"auto\">MGHPCC Shared Computing Cluster 4 (SCC4<\/span><span data-contrast=\"auto\">)<\/span><span data-ccp-props=\"{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li data-leveltext=\"o\" data-font=\"Courier New\" data-listid=\"11\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"2\"><span data-contrast=\"auto\">BU network drive<\/span><\/li>\n<\/ul>\n<\/li>\n<li data-leveltext=\"o\" data-font=\"Courier New\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"2\"><strong>Devices\u00a0<\/strong>\n<ul>\n<li data-leveltext=\"o\" data-font=\"Courier New\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"2\">BU Managed device with current OS and encryption enabled<\/li>\n<li data-leveltext=\"o\" data-font=\"Courier New\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"2\">Send email to <a href=\"mailto:bumchelp@bu.edu\">bumchelp@bu.edu<\/a> to confirm all devices comply with the BU Secure End Point Standard<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><strong><\/div>\n<\/div>\n<\/strong><\/p>\n<p><strong><span data-ogsc=\"rgb(51, 51, 51)\"><div class=\"bu_collapsible_container \" aria-live=\"polite\" data-customize-animation=\"false\"><h3 class=\"bu_collapsible\" aria-expanded=\"false\"tabindex=\"0\" role=\"button\">Confidential<\/h3><div class=\"bu_collapsible_section\" style=\"display: none;\"><\/span><\/strong><\/p>\n<p><strong><span data-ogsc=\"rgb(51, 51, 51)\">Confidential\u00a0<\/span><\/strong><\/p>\n<ul>\n<li><strong>Data\u00a0<\/strong>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"9\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">FERPA<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"9\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"1\">Human subject data that is not health related (e.g., texts\/day), and not provided by a HIPAA Entity \u2013 such as BMC or another hospital<\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"9\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"1\">\n<div>\n<div><span><\/span>Human Subject health data with identifiers limited to dates, city, and Zip Code, and not provided by a HIPAA Entity \u2013 such as BMC or another hospital<\/div>\n<\/div>\n<\/li>\n<\/ul>\n<\/li>\n<li><strong>Services<\/strong>\n<ul>\n<li>All services listed above in Confidential (HIPAA Limited Data Set)<\/li>\n<li><span data-contrast=\"auto\">BU Google apps (Drive, Sheets)\u00a0<\/span><\/li>\n<\/ul>\n<\/li>\n<li data-leveltext=\"o\" data-font=\"Courier New\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"2\"><strong>Devices\u00a0<\/strong>\n<ul>\n<li data-leveltext=\"o\" data-font=\"Courier New\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"2\">BU Managed device with current OS and encryption enabled<\/li>\n<li data-leveltext=\"o\" data-font=\"Courier New\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"2\">Send email to <a href=\"mailto:bumchelp@bu.edu\">bumchelp@bu.edu<\/a> to confirm all devices comply with the BU Secure End Point Standard<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><strong><\/div>\n<\/div>\n<\/strong><\/p>\n<p><strong><span data-ogsc=\"rgb(51, 51, 51)\"><div class=\"bu_collapsible_container \" aria-live=\"polite\" data-customize-animation=\"false\"><h3 class=\"bu_collapsible\" aria-expanded=\"false\"tabindex=\"0\" role=\"button\">Internal<\/h3><div class=\"bu_collapsible_section\" style=\"display: none;\"><\/span><\/strong><\/p>\n<p><strong><span data-ogsc=\"rgb(51, 51, 51)\">Internal\u00a0<\/span><\/strong><\/p>\n<ul>\n<li><strong>Data\u00a0<\/strong>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"9\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"1\">Animal research data<\/li>\n<\/ul>\n<\/li>\n<li><strong>Services<\/strong>\n<ul>\n<li>All services listed above in Confidential<\/li>\n<li><span>MGHPCC Shared Computing Cluster 1, 2, or 3 (SCC1-3)<\/span><\/li>\n<li><span>New England Research Cloud<\/span><\/li>\n<\/ul>\n<\/li>\n<li data-leveltext=\"o\" data-font=\"Courier New\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"2\"><strong>Devices\u00a0<\/strong>\n<ul>\n<li data-leveltext=\"o\" data-font=\"Courier New\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"2\">BU Managed device with current OS and encryption enabled<\/li>\n<li data-leveltext=\"o\" data-font=\"Courier New\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"2\">Send email to <a href=\"mailto:bumchelp@bu.edu\">bumchelp@bu.edu<\/a> to confirm all devices comply with the BU Secure End Point Standard<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><strong><\/div>\n<\/div>\n<\/strong><\/p>\n<p><strong><span data-ogsc=\"rgb(51, 51, 51)\"><div class=\"bu_collapsible_container \" aria-live=\"polite\" data-customize-animation=\"false\"><h3 class=\"bu_collapsible\" aria-expanded=\"false\"tabindex=\"0\" role=\"button\">Public<\/h3><div class=\"bu_collapsible_section\" style=\"display: none;\"><\/span><\/strong><\/p>\n<p><strong><span data-ogsc=\"rgb(51, 51, 51)\">Public\u00a0<\/span><\/strong><\/p>\n<ul>\n<li><strong>Data\u00a0<\/strong>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"9\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span>Completely de-identified HIPAA data (e.g., no email, phone number, Zip Code, or dates of birth\/death or treatment).\u00a0 See <a href=\"https:\/\/www.hhs.gov\/hipaa\/for-professionals\/privacy\/special-topics\/de-identification\/index.html\">HIPAA Standard<\/a><\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"9\" aria-setsize=\"-1\" data-aria-posinset=\"1\" data-aria-level=\"1\">Data already in the public domain, that does not require protection<\/li>\n<\/ul>\n<\/li>\n<li><strong>Services<\/strong>\n<ul>\n<li>All services listed above in Internal<\/li>\n<\/ul>\n<\/li>\n<li data-leveltext=\"o\" data-font=\"Courier New\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"2\"><strong>Devices\u00a0<\/strong>\n<ul>\n<li data-leveltext=\"o\" data-font=\"Courier New\" data-listid=\"14\" aria-setsize=\"-1\" data-aria-posinset=\"4\" data-aria-level=\"2\">No requirements for devices<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><strong><\/div>\n<\/div>\n<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Research Protocol Confidentiality Section Paper documents &#8211; Information collected on paper, such as screening information, is stored in a locked file cabinet that only the research team has access to. Electronic Data &#8211; The following sections identify what services are appropriate for each data classification. Generally, research teams will store identifiable health information and any&#8230;<\/p>\n","protected":false},"author":19109,"featured_media":0,"parent":139625,"menu_order":4,"comment_status":"closed","ping_status":"closed","template":"","meta":[],"_links":{"self":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/145543"}],"collection":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/users\/19109"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/comments?post=145543"}],"version-history":[{"count":10,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/145543\/revisions"}],"predecessor-version":[{"id":160103,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/145543\/revisions\/160103"}],"up":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/139625"}],"wp:attachment":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/media?parent=145543"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}