Skip to content Skip to main navigation Report an accessibility issue
Research Computing Support

Sensitive Identifiable Human Subject Research Information (Human Subject)



Data Description

Sensitive Identifiable Human Subject Research Information (Human Subject) is regulated by the Federal Policy for the Protection of Human Subjects (also called the “Common Rule”). Among other requirements, the Common Rule mandates that researchers protect the privacy of subjects and maintain confidentiality of human subject data. A human subject is defined by federal regulations as a “living individual about whom an investigator (whether professional or student) conducting research obtains data through intervention or interaction with the individual, or obtains, uses, studies, analyzes, or generates identifiable private information.” “Identifiable private information” is private information for which the identity of the subject is or may readily be ascertained by the investigator or associated with the information.

Examples of Human Subject:

Human Subject data is considered sensitive when the disclosure of information could have adverse consequences for subjects or others, place them at risk for criminal or civil liability, or damage their financial standing, employability, insurability, or reputation.

Personally Identifiable Information (PII) along with research data referring to:

  • Illegal behavior
  • Drug and alcohol abuse
  • Sexual behavior
  • Other sensitive health or genetic information
PermittedIT Tools & Products
Allowed if written approval provided by ORIEDGoogle Drive
*Allowed if written approval provided in IRB documents
Allowed if written approval provided by ORIEDGmail
*Allowed if written approval provided in IRB documents
Allowed if written approval provided by ORIEDOutlook
*Allowed if written approval provided in IRB documents
Allowed if written approval provided by ORIEDMicrosoft OneDrive for Business
*Allowed if written approval provided in IRB documents
Allowed if written approval provided by ORIEDMicrosoft Teams
*Allowed if written approval provided in IRB documents
Allowed if written approval provided by ORIEDisaac-legacy
*Allowed if written approval provided in IRB documents
Allowed if written approval provided by ORIEDISAAC Next Generation cluster (ISAAC-NG)
*Allowed if written approval provided in IRB documents
ALLOWEDISAAC Secure Enclave
ALLOWEDWindows Virtual Machines (VMs)
ALLOWEDLinux Virtual Data Center Workstations (Linux vDWS)
ALLOWEDVirtual Data Center WorkStations (vDWS)
ALLOWEDWebEx FedRAMP
ALLOWEDZoom
ALLOWEDGlobus - Secure Enclave
Allowed if written approval provided by ORIEDGlobus - Open Enclave
**Allowed only if deidentified human subjects research information
Allowed if written approval provided by ORIEDQualtrics
*Allowed if written approval provided in IRB documents
Allowed if written approval provided by ORIEDREDCap
*Allowed if written approval provided in IRB documents
NOT ALLOWEDAmazon Web Services (AWS)
NOT ALLOWEDGoogle Cloud Platform (GCP)
NOT ALLOWEDGoogle Cloud Platform FedRAMP
NOT ALLOWEDMicrosoft Azure
NOT ALLOWEDMicrosoft Azure FedRAMP

Additional Resources

Contact the Office of Research, Innovation, and Economic Development (ORIED) for additional information about data types.

Rob Withrow, Director, Human Research Protection Program
email: rwithrow@utk.edu
phone: 865-974-7494