UCSF data access processes are designed to make policy compliance easy and seamless. If you are working with a consultant for clinical data access, you will receive guidance on regulatory issues.
General Policies for UCSF Data Use
- Institutional Review Board - provides guidance on human subjects information
- Data and Safety Monitoring Plans and Boards (DSMP, DSMB)
- Control of Access to and Release of Information from UCSF Medical Center Information Systems (SFID or Active Directory credential required)
- Data Use Agreement – work with the UCSF Industry Contracts Division to determine if an agreement or contract is necessary for your planned research collaboration
- UCSF Information Security and Confidentiality Policy
- University of California Electronic Communications Policy (ECP)
- University of California Research Data Policy
- UCSF Guidance on Implementation of the UC Research Data Policy
- Policy 650-20: External Sharing of Personally Identifiable Information (PII) and PII-Derived Data
Data Sharing and Access Policies Versa Assistant
The Data Sharing and Access Policies Assistant enables you to ask questions about data access, data compliance, and data sharing topics in an interactive manner through Versa. The information available through this Assistant includes data access requirements and processes, data sharing requirements and processes, data compliance policies, and other data compliance related topics. Learn More: Data Sharing and Access Policies - UCSF Versa Knowledge Base - Wiki@UCSF
Enterprise Data Request Process
The Enterprise Data Request Process (EDRP) ensures all UCSF privacy and security policies are followed. The process provides faculty, staff, and students with a streamlined and easy-to-use way to request clinical data for treatment, payment, operations, quality improvement, and research. A wide range of stakeholders participated in developing the EDRP and supporting the UCSF Community on the following process on an ongoing basis.
Process Documentation
Submitting a Request for Data
With this simplified process, the system automatically guides your request through the completion of the required steps after the initial request. Explore the details:
- Requesting Clinical Data Sets for Research
- Requesting Clinical Data Sets for Clinical and Quality Initiatives
Tips for Data Service Providers Managing Enterprise Data Request Tickets
Additional Resources
- Enterprise Information & Analytics Intake Request Form
- Recommended IRB Protocol Approval Verification Checklist
- Research Compliance Requirements
Stakeholders in Defining and Supporting the Enterprise Data Request Process
- Enterprise Information and Analytics Department and Steering Committee
- Audit and Advisory Services
- Clinical and Translational Science Institute
- Privacy Office
- Security and Policy
- Legal
- Risk Management
- Human Research Protection Program
- Health System and Campus Procurement Offices
- Health Plan Strategy
- Office of Sponsored Research
- Innovation Technology and Alliances
- Academic Research Services
- Library
- Export Control