Understanding Need to Know

Assessing the research team member's need to know confidential data should be done in the context of risk to the human subject, if the data were disclosed. The least privileges necessary to conduct, analyze, publish, and retain confidential data should always be assigned, with the subject's privacy in mind. 

Guidelines for Researchers:

• The Principal Investigator (PI) determines access to confidential and sensitive data for each member of the research team.
• Whenever possible the research team should work with de-identified data.
• We are all responsible for the protection of confidential and sensitive information, and upholding the principles of respect, privacy, and appropriateness with regard to human subjects in research.

For additional information about these principles, please review the IRB Policies and Procedures as well as the Federal Guidelines.