Personal data
Whether the project collects names, email addresses, phone numbers, participant identifiers, or other identifiable information.
Data risk assessment
Data sensitivity and governance
REDCap project requests are reviewed for data sensitivity, project ownership, external organisations, and any governance requirements before production use.
What we need to understand
Sensitive data
Whether the project collects health, wellbeing, NHS, children, vulnerable group, criminal offence, or other sensitive information.
External organisations
Whether the project involves NHS organisations, another university, charity, commercial partner, or other external collaborators.
Possible governance checks
Depending on the type of project, the LIRCH REDCap team may need to confirm whether additional governance checks are required before production use.
- Ethics approval
- DPIA or information governance review
- Data sharing agreement
- External organisation approval
- NHS or clinical information governance review
- Confirmation of project ownership and user access responsibilities