Unexpected situations involving research data can arise in any project. When planning data management, it is advisable to consider what would happen if, for example, IT systems became temporarily unavailable, a storage device was damaged or lost, or the team member responsible for managing the data was no longer available. If you are unsure which storage and backup solutions are appropriate for your project data, contact the faculty’s research infrastructure specialist or the university’s IT helpdesk. Further guidance on data storage can also be found in the relevant chapter of the learning material Research Data Management and Publishing.
Information on data storage, backup options and support services available at the University of Tartu
Two key principles should guide research data storage: always keep multiple copies of your data and, whenever possible, use university-managed infrastructure. Ideally, data backups should follow the 3-2-1 rule: maintain three copies of the data, stored on two different types of media, with one copy kept in a separate location.
The University of Tartu High Performance Computing Center (HPC) provides secure computing environments for the storage and processing of personal data of special categories. In our faculty, researchers have used the SAPU (sensitiivsete andmete privaatne uurimiskeskkond, ‘private research environment for sensitive data’) service, an isolated server separated from external networks, where data transfers are controlled, and all user activity is logged. Other HPC services can also support the establishment of project-specific databases, websites, and data-processing servers.
When processing and storing personal data, be sure to consult the relevant section of the university's Guide for data protection in research. Based on the principles set out in the guide, determine the risk level of your project's data and select an appropriate processing and storage environment. The guide also addresses data storage issues that should be covered in both the data management plan and the ethics committee application.
Personal data must not be stored on personal cloud service accounts or personal devices.
Personal data may only be retained for as long as the research participants have given their consent. It is therefore important to consider at an early stage whether the data being collected may prove valuable and suitable for reuse in research. This will determine the scope and wording of the consent requested from research participants. More information: How long can personal data used in research be stored? Guide for data protection in research.
Read the University of Tartu IT helpdesk's cybersecurity guide to protect yourself, your equipment and your project's data from potential security incidents.