Principle of Least Privilege

When designing research methods and data collection, researchers must develop procedures that restrict access to confidential data, providing access only to those who must have access for the purpose of the research. Further, access should be restricted based on the researcher role, assigned by the PI, and institutional policy, in context of the data being collected. For example, not all researchers may need access to identifiable data for the purposes of analysis. The least amount of access should be granted to fulfill the researcher role in the data collection.