{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,24]],"date-time":"2026-03-24T12:52:11Z","timestamp":1774356731382,"version":"3.50.1"},"reference-count":40,"publisher":"Oxford University Press (OUP)","issue":"20","license":[{"start":{"date-parts":[[2016,10,2]],"date-time":"2016-10-02T00:00:00Z","timestamp":1475366400000},"content-version":"vor","delay-in-days":465,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015,10,15]]},"abstract":"<jats:title>Abstract<\/jats:title>\n               <jats:p>Motivation: The data that put the \u2018evidence\u2019 into \u2018evidence-based medicine\u2019 are central to developments in public health, primary and hospital care. A fundamental challenge is to site such data in repositories that can easily be accessed under appropriate technical and governance controls which are effectively audited and are viewed as trustworthy by diverse stakeholders. This demands socio-technical solutions that may easily become enmeshed in protracted debate and controversy as they encounter the norms, values, expectations and concerns of diverse stakeholders. In this context, the development of what are called \u2018Data Safe Havens\u2019 has been crucial. Unfortunately, the origins and evolution of the term have led to a range of different definitions being assumed by different groups. There is, however, an intuitively meaningful interpretation that is often assumed by those who have not previously encountered the term: a repository in which useful but potentially sensitive data may be kept securely under governance and informatics systems that are fit-for-purpose and appropriately tailored to the nature of the data being maintained, and may be accessed and utilized by legitimate users undertaking work and research contributing to biomedicine, health and\/or to ongoing development of healthcare systems.<\/jats:p>\n               <jats:p>Results: This review explores a fundamental question: \u2018what are the specific criteria that ought reasonably to be met by a data repository if it is to be seen as consistent with this interpretation and viewed as worthy of being accorded the status of \u2018Data Safe Haven\u2019 by key stakeholders\u2019? We propose 12 such criteria.<\/jats:p>\n               <jats:p>Contact: \u00a0paul.burton@bristol.ac.uk<\/jats:p>","DOI":"10.1093\/bioinformatics\/btv279","type":"journal-article","created":{"date-parts":[[2015,6,26]],"date-time":"2015-06-26T02:45:07Z","timestamp":1435286707000},"page":"3241-3248","source":"Crossref","is-referenced-by-count":54,"title":["Data Safe Havens in health research and healthcare"],"prefix":"10.1093","volume":"31","author":[{"given":"Paul R.","family":"Burton","sequence":"first","affiliation":[{"name":"1 Data to Knowledge (D2K) Research Group, University of Bristol, Oakfield House, Oakfield Grove, Clifton, Bristol BS8 2BN, UK,"},{"name":"2 Public Population Project in Genomics and Society (P3G), Montreal, QC H3A 0G1, Canada,"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Madeleine J.","family":"Murtagh","sequence":"additional","affiliation":[{"name":"1 Data to Knowledge (D2K) Research Group, University of Bristol, Oakfield House, Oakfield Grove, Clifton, Bristol BS8 2BN, UK,"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Andy","family":"Boyd","sequence":"additional","affiliation":[{"name":"1 Data to Knowledge (D2K) Research Group, University of Bristol, Oakfield House, Oakfield Grove, Clifton, Bristol BS8 2BN, UK,"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"James B.","family":"Williams","sequence":"additional","affiliation":[{"name":"3 Department of Computer Science, University of Toronto, Sandford Fleming Building, Toronto, ON M5S 3G4, Canada,"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Edward S.","family":"Dove","sequence":"additional","affiliation":[{"name":"4 JK Mason Institute for Medicine, Life Sciences and the Law, School of Law, University of Edinburgh, Old College, South Bridge, Edinburgh EH8 9YL, UK,"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Susan E.","family":"Wallace","sequence":"additional","affiliation":[{"name":"2 Public Population Project in Genomics and Society (P3G), Montreal, QC H3A 0G1, Canada,"},{"name":"5 Department of Health Sciences, University of Leicester, Adrian Building, University Road, Leicester LE1 7RH, UK,"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Anne-Marie","family":"Tass\u00e9","sequence":"additional","affiliation":[{"name":"2 Public Population Project in Genomics and Society (P3G), Montreal, QC H3A 0G1, Canada,"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Julian","family":"Little","sequence":"additional","affiliation":[{"name":"6 School of Epidemiology, Public Health and Preventive Medicine, Faculty of Medicine, University of Ottawa, Ottawa, ON K1H 8M5, Canada,"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Rex L.","family":"Chisholm","sequence":"additional","affiliation":[{"name":"7 Center for Genetic Medicine and Surgery, Northwestern University, Rubloff Building, 750 N Lake Shore, Chicago, IL 60611, USA,"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Amadou","family":"Gaye","sequence":"additional","affiliation":[{"name":"1 Data to Knowledge (D2K) Research Group, University of Bristol, Oakfield House, Oakfield Grove, Clifton, Bristol BS8 2BN, UK,"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kristian","family":"Hveem","sequence":"additional","affiliation":[{"name":"8 Department of Public Health and General Practice, Norwegian University of Science and Technology, Postboks 8905, 7401 Trondheim, Norway,"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Anthony J.","family":"Brookes","sequence":"additional","affiliation":[{"name":"5 Department of Health Sciences, University of Leicester, Adrian Building, University Road, Leicester LE1 7RH, UK,"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pat","family":"Goodwin","sequence":"additional","affiliation":[{"name":"9 C3 Collaborating for Health, 7-14 Great Dover Street, London SE1 4YR,"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jon","family":"Fistein","sequence":"additional","affiliation":[{"name":"10 MRC Medical Bioinformatics Centre, Leeds Institute of Health Sciences, University of Leeds, University of Leeds, Charles Thackrah Building,101 Clarendon Road, Leeds LS2 9LJ,"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Martin","family":"Bobrow","sequence":"additional","affiliation":[{"name":"11 University of Cambridge, Wolfson College, Cambridge CB3 9BB, UK and"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bartha M.","family":"Knoppers","sequence":"additional","affiliation":[{"name":"2 Public Population Project in Genomics and Society (P3G), Montreal, QC H3A 0G1, Canada,"},{"name":"12 Centre of Genomics and Policy, McGill University, Montreal, QC H3A 0G1, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"286","published-online":{"date-parts":[[2015,6,25]]},"reference":[{"key":"2023020202320070500_btv279-B1","volume-title":"Realising the potential of stratified medicine","author":"Academy of Medical Sciences","year":"2013"},{"key":"2023020202320070500_btv279-B2","volume-title":"Data in Safe Havens","author":"Academy of Medical Sciences","year":"2014"},{"key":"2023020202320070500_btv279-B3","article-title":"GPs boycott big brother data plan","author":"Adams","year":"2013","journal-title":"Mail on Sunday"},{"key":"2023020202320070500_btv279-B4","author":"Administrative Data Taskforce","year":"2012"},{"key":"2023020202320070500_btv279-B5","author":"Anderson","year":"1996"},{"key":"2023020202320070500_btv279-B6","author":"Beauchamp","year":"2001"},{"key":"2023020202320070500_btv279-B7","volume-title":"Tragic Choices","author":"Calabresi","year":"1978"},{"key":"2023020202320070500_btv279-B8","author":"Caldicott","year":"2013"},{"key":"2023020202320070500_btv279-B9","author":"Care Record Development Board","year":"2007"},{"key":"2023020202320070500_btv279-B10","article-title":"Data Drive","volume-title":"LABX Media Group","author":"Chi","year":"2013"},{"key":"2023020202320070500_btv279-B11","volume-title":"UK Biobank: Protocol for a Large-Scale Prospective Epidemiological Resource","author":"Collins","year":"2007"},{"key":"2023020202320070500_btv279-B12","doi-asserted-by":"crossref","DOI":"10.1002\/0470858060","volume-title":"Towards the Semantic Web: Ontology-Driven Knowledge Management","author":"Davies","year":"2002"},{"key":"2023020202320070500_btv279-B13","doi-asserted-by":"crossref","first-page":"247","DOI":"10.1093\/eurpub\/cks043","article-title":"Cross-border flow of health information: is 'privacy by design' enough? Privacy performance assessment in EUBIROD","volume":"23","author":"Di Iorio","year":"2013","journal-title":"Eur. J. Public Health"},{"key":"2023020202320070500_btv279-B14","author":"Dilger","year":"2013"},{"key":"2023020202320070500_btv279-B15","author":"Directorate of Information Services MEL(1992)42","year":"1992"},{"key":"2023020202320070500_btv279-B16","doi-asserted-by":"crossref","first-page":"730","DOI":"10.1136\/bmj.322.7288.730","article-title":"Rights involve responsibilities for patients","volume":"322","author":"Doll","year":"2001","journal-title":"BMJ (Clinical Research Ed)"},{"key":"2023020202320070500_btv279-B17","doi-asserted-by":"crossref","DOI":"10.1007\/11787006_1","article-title":"Differential Privacy","volume-title":"33rd International Colloquium: Automata, Languages and Programming 2006.","author":"Dwork","year":"2006"},{"key":"2023020202320070500_btv279-B18","doi-asserted-by":"crossref","first-page":"409","DOI":"10.1038\/nrg3723","article-title":"Routes for breaching and protecting genetic privacy","volume":"15","author":"Erlich","year":"2014","journal-title":"Nat. Rev. Genet."},{"key":"2023020202320070500_btv279-B20","doi-asserted-by":"crossref","first-page":"1929","DOI":"10.1093\/ije\/dyu188","article-title":"DataSHIELD: taking the analysis to the data, not the data to the analysis","volume":"43","author":"Gaye","year":"2014","journal-title":"Int. J. Epidemiol."},{"key":"2023020202320070500_btv279-B21","doi-asserted-by":"crossref","DOI":"10.4337\/9781845424596","volume-title":"Technological Transitions and System Innovations: a Co-evolutionary and Socio-technical Analysis","author":"Geels","year":"2005"},{"key":"2023020202320070500_btv279-B22","volume-title":"Framework for Responsible Sharing of Genomic and Health-Related Data","author":"Global Alliance for Genomics and Health","year":"2014"},{"key":"2023020202320070500_btv279-B23","doi-asserted-by":"crossref","DOI":"10.1145\/1179601.1179615","article-title":"Revisiting the uniqueness of simple demographics in the US population","volume-title":"Proceedings of the 5th ACM Workshop on Privacy in Electronic Society","author":"Golle","year":"2006"},{"key":"2023020202320070500_btv279-B24","doi-asserted-by":"crossref","first-page":"c2335","DOI":"10.1136\/bmj.c2335","article-title":"Need for a wider view of autonomy in epidemiological research","volume":"340","author":"Hansson","year":"2010","journal-title":"BMJ (Clinical Research Ed)"},{"key":"2023020202320070500_btv279-B25","doi-asserted-by":"crossref","first-page":"335","DOI":"10.1198\/004017007000000209","article-title":"Secure, privacy-preserving analysis of distributed databases","volume":"49","author":"Karr","year":"2007","journal-title":"Technometrics"},{"key":"2023020202320070500_btv279-B26","doi-asserted-by":"crossref","DOI":"10.1017\/CBO9781107590205.017","article-title":"Using statistics to protect privacy","volume-title":"Privacy, Big Data, and the Public Good Frameworks for Engagement","author":"Karr","year":"2014"},{"key":"2023020202320070500_btv279-B27","article-title":"Transparency in the NHS not only saves lives, it is a basic human right","author":"Kelsey","year":"2013","journal-title":"The Guardian"},{"key":"2023020202320070500_btv279-B28","doi-asserted-by":"crossref","first-page":"9","DOI":"10.1186\/1472-6939-9-9","article-title":"Clinical research without consent in adults in the emergency setting: a review of patient and public views","volume":"9","author":"Lecouturier","year":"2008","journal-title":"BMC Med. Ethics"},{"key":"2023020202320070500_btv279-B29","first-page":"11","volume-title":"The age of big data","author":"Lohr","year":"2012"},{"key":"2023020202320070500_btv279-B30","doi-asserted-by":"crossref","first-page":"1643","DOI":"10.1016\/S0277-9536(02)00172-7","article-title":"Feminist ethics and menopause: autonomy and decision-making in primary medical care","volume":"56","author":"Murtagh","year":"2003","journal-title":"Soc. Sci. Med."},{"key":"2023020202320070500_btv279-B31","author":"NHS Connecting for Health","year":"2009"},{"key":"2023020202320070500_btv279-B32","author":"NHS Research Capability Programme","year":"2008"},{"key":"2023020202320070500_btv279-B33","author":"OECD Expert Group for International Collaboration on Microdata Access","year":"2014"},{"key":"2023020202320070500_btv279-B34","doi-asserted-by":"crossref","DOI":"10.1002\/9781118551424","volume-title":"Responsible innovation: managing the responsible emergence of science and innovation in society","author":"Owen","year":"2013"},{"key":"2023020202320070500_btv279-B35","doi-asserted-by":"crossref","first-page":"34","DOI":"10.1093\/ije\/dyi183","article-title":"Cohort profile: 1958 British birth cohort (National Child Development Study)","volume":"35","author":"Power","year":"2006","journal-title":"Int. J. Epidemiol."},{"key":"2023020202320070500_btv279-B36","article-title":"Why \u201cBig Data\u201d is a big deal","author":"Shaw","year":"2014","journal-title":"Harvard"},{"key":"2023020202320070500_btv279-B37","doi-asserted-by":"crossref","first-page":"557","DOI":"10.1142\/S0218488502001648","article-title":"k-anonymity: A model for protecting privacy","volume":"10","author":"Sweeney","year":"2002","journal-title":"Int. J. Uncertainty Fuzziness Knowl. Syst."},{"key":"2023020202320070500_btv279-B38","doi-asserted-by":"crossref","first-page":"1","DOI":"10.2966\/scrip.110114.1","article-title":"Information governance as a force for good? Lessons to be learnt from care.data","volume":"11","author":"Taylor","year":"2014","journal-title":"ScriptEd"},{"key":"2023020202320070500_btv279-B39","volume-title":"Data Sharing Review","author":"Thomas","year":"2008"},{"key":"2023020202320070500_btv279-B42","doi-asserted-by":"crossref","first-page":"1372","DOI":"10.1093\/ije\/dyq111","article-title":"DataSHIELD: resolving a conflict in contemporary bioscience\u2014performing a pooled analysis of individual-level data without sharing the data","volume":"39","author":"Wolfson","year":"2010","journal-title":"Int. J. Epidemiol."},{"key":"2023020202320070500_btv279-B43","volume-title":"Fixing Healthcare: The Professionals' Perspective","author":"Wyke","year":"2009"}],"container-title":["Bioinformatics"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/academic.oup.com\/bioinformatics\/article-pdf\/31\/20\/3241\/49036138\/bioinformatics_31_20_3241.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/academic.oup.com\/bioinformatics\/article-pdf\/31\/20\/3241\/49036138\/bioinformatics_31_20_3241.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,2,2]],"date-time":"2023-02-02T03:51:15Z","timestamp":1675309875000},"score":1,"resource":{"primary":{"URL":"https:\/\/academic.oup.com\/bioinformatics\/article\/31\/20\/3241\/195451"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,6,25]]},"references-count":40,"journal-issue":{"issue":"20","published-print":{"date-parts":[[2015,10,15]]}},"URL":"https:\/\/doi.org\/10.1093\/bioinformatics\/btv279","relation":{},"ISSN":["1367-4811","1367-4803"],"issn-type":[{"value":"1367-4811","type":"electronic"},{"value":"1367-4803","type":"print"}],"subject":[],"published-other":{"date-parts":[[2015,10,15]]},"published":{"date-parts":[[2015,6,25]]}}}