1.  What types of confidential information might I encounter as a researcher?

Researchers may encounter confidential, personally identifiable, or other protected information in grant proposals, scientific manuscripts, or academic reviews of colleagues, or from sponsors. Common types of protected data include: 

• Human subjects data
• Personal health information (PHI) originating from UI Health Care
• Personally identifiable information (PII)
• Education records
• Customer record information
• Employee personnel file information
• Proprietary or confidential information
• Federally or state-protected information
• University of Iowa information assets

Each category requires approval for access and appropriate protection of personal, proprietary, or other sensitive data.

2. What resources are available to help protect confidentiality, privacy, and data security? 

The following resources provide guidance on safeguarding the confidentiality, privacy, and security of research participants and research data.

General guidance

• Division of Sponsored Programs (DSP) Data Management and Sharing  
• Human Subjects Office Data Security Guidance 

Special considerations by data type

Human subjects data and protected health information (PHI)

• University of Iowa Human Subjects Office Privacy Rule & Resources
• U.S. Department of Health and Human Services HIPAA FAQ for Professionals
• University of Iowa ITS Security Privacy Rules and HIPAA

Education records and the Family Educational Rights and Privacy Act (FERPA)

• University of Iowa Office of the Registrar – FERPA 

Employee personnel file information

• University of Iowa Human Resources Guidelines and Best Practices for Personnel Files

Institutional data

• University of Iowa information assets

Research data

• Research Data Policy

Research security

• Research Security Policy

DSP can assist with research-related confidentiality and data-sharing agreements or connect researchers with additional resources. For assistance, contact dsp-contracts@uiowa.edu