Releasing research outputs from the Level 4 server
OpenSAFELY follows the Five Safes framework for data access to allow safe and efficient use of data.
The Five Safes are:
- Safe projects
- Safe people
- Safe data
- Safe settings
- Safe outputs
When we release files from the Level 4 server, we need to take particular care of the Safe Outputs dimension of the Five Safes framework, which assesses any residual risk of disclosure of patient information in outputs wishing to be released from the secure environment. This risk is minimised by researchers applying statistical disclosure controls to their research outputs, followed by output checking of these outputs by our team of trained output checkers.
In OpenSAFELY, there are 4 key “Safe Outputs” activities:
1. Apply Statistical disclosure controls
Researchers must apply statistical disclosure controls to their research outputs.
2. Requesting release of outputs
Researchers must follow a defined procedure for requesting release of outputs from the Level 4 server. This includes:
- only requesting release of files that are necessary to fulfil the purpose of a project
- describing the context (why the files are requested for release) and statistical disclosure controls applied
- restricting files to specific allowed types
- limits on file size and number of rows in tables
- Airlock, a dedicated OpenSAFELY tool for managing the release request and review process
Review of the requested outputs by two trained OpenSAFELY output checkers.
4. Retricted viewing of released files
Outputs that meet our disclosure rules and have undergone thorough output checking are released to the relevant workspace on the Jobs site. Viewing of released outputs is restricted to individuals with the relevant roles on the jobs site, and is not publicly accessible until outputs are published.