Data Processing Description. This Annex 1 forms part of this MTA and describes the types of Participant Level Data disclosed by UK Biobank to the Applicant and Applicant Researchers to process strictly for the Permitted Purpose described in this MTA (or as otherwise agreed in writing by the parties).3 Data subjects The Participants Categories of data The Participant Level Data to be Processed concern the following categories of Personal Data: EIDs – the encoded and unique pseudonymised identifiers which are specific to the Approved Research Project; and data derived from baseline questionnaire responses and interviews which do not contain special category data, such as birthplace, early life and education, employment history, marital status and number of children. Special categories of data The Participant Level Data to be Processed concern the following special categories of data: The UK Biobank Resource contains health, genetic and biometric data. All special categories of data contained in the Materials is de-identified (the direct and indirect identifiers are removed). The types of special category of data may include: measures of the Participant’s phenotype, such as height, weight and blood pressure (approximately 2,000 phenotypes per Participant, as further detailed here xxxx://xxxxxxx.xxxx.xx.xx.xx/showcase/schema.cgi?id=1 ) measures of the Participant’s genome, this includes genotype, exome sequence and whole xxxxxxxx xxxx; biomarkers created by assay of the Participant’s samples, which include common biomarkers (such as cholesterol), infectious disease markers, proteomic and metabolomic markers; imaging data (on up to 100,000 Participants) as the result of MRI scans of the head, the heart and the body, plus ultrasound and DEXA; and data derived from health record linkages including hospital records, primary care records, death and cancer registries or any other sources of clinical data; and special category data derived from baseline questionnaire responses and interviews, such as past illness / disease history, dietary, cognitive and physical measures. Purpose of the transfer The transfer is made to allow the Applicant to conduct the Permitted Purpose. Recipients The Participant Level Data transferred may be disclosed only to the following recipients or categories of recipients: Authorised personnel within the Applicant, namely the Applicant Principal Investigator and Applicant Researchers; Third Party Processors subject to the relevant provisions of the MTA; Law enforcement agencies acting under Data Protection Legislation; The relevant data protection authority acting under Data Protection Legislation; and Auditors (UK Biobank or appropriate third parties). Processing activities The Participant Level Data will be subject to the following basic Processing activities: Access and use of Participant Level Data within the research analysis platform for the Permitted Purpose; Where approved by UK Biobank the transmission to, making available to and storage on the Researcher's systems/network servers, excluding any WGS (whole genome sequence) or XXX (whole exome sequence) files which must not be transmitted or downloaded from the research analysis platform; research operations, including a Processor Task by a Third Party Processor; and risk management, compliance, legal and audit functions. UK Biobank's lawful basis for sharing Personal Data Personal Data: Legitimate interests (Article 6(1)(f) UK GDPR) Special Categories of Data: Scientific research purpose (Article 9(2)(j) UK GDPR) 3 For further information about this MTA’s Data Protection clauses and an explanation of UK Biobank’s position in relation to Data Protection, please see the FAQs on the UK Biobank website (which shall be updated by UK Biobank from time to time). UK Biobank’s DPO contact details: XXX@xxxxxxxxx.xx.xx Applicant’s DPO contact details: Annex 2 Security Measures UK Biobank has a legal obligation under the UK GDPR to ensure that its Materials are stored, retrieved and used securely, with appropriate organisational and technical measures in place. UK Biobank must also take reasonable steps to ensure that Materials it shares continue to be protected with adequate security. This Annex 2 forms part of the MTA and represents the minimum level of security standards for data storage, retrieval and usage that the Applicant must comply with. This Annex 2 may be updated by UK Biobank from time-to-time. The objective of these security measures is to ensure that Materials provided by UK Biobank are secured and treated as though they are Personal Data, and with particular respect to: Confidentiality – data are secured with organisational and technical measures in place to restrict access only to authorised users and protected from unauthorised access by internal and external threats; and Integrity – data remains accurate and complete to support high quality research to be undertaken.
Appears in 2 contracts
Samples: Transfer Agreement, Transfer Agreement
Data Processing Description. This Annex 1 forms part of this MTA and describes the types of Participant Level Data disclosed by UK Biobank to the Applicant and Applicant Researchers to process strictly for the Permitted Purpose described in this MTA (or as otherwise agreed in writing by the parties).3 Data subjects The Participants Categories of data The Participant Level Data to be Processed concern the following categories of Personal Data: • EIDs – the encoded and unique pseudonymised identifiers which are specific to the Approved Research Project; and • data derived from baseline questionnaire responses and interviews which do not contain special category data, such as birthplace, early life and education, employment history, marital status and number of children. Special categories of data The Participant Level Data to be Processed concern the following special categories of data: The UK Biobank Resource contains health, genetic and biometric data. All special categories of data contained in the Materials is de-identified (the direct and indirect identifiers are removed). The types of special category of data may include: • measures of the Participant’s phenotype, such as height, weight and blood pressure (approximately 2,000 phenotypes per Participant, as further detailed here xxxx://xxxxxxx.xxxx.xx.xx.xx/showcase/schema.cgi?id=1 ) • measures of the Participant’s genome, this includes genotype, exome sequence and whole xxxxxxxx xxxx; • biomarkers created by assay of the Participant’s samples, which include common biomarkers (such as cholesterol), infectious disease markers, proteomic and metabolomic markers; • imaging data (on up to 100,000 Participants) as the result of MRI scans of the head, the heart and the body, plus ultrasound and DEXA; and • data derived from health record linkages including hospital records, primary care records, death and cancer registries or any other sources of clinical data; and • special category data derived from baseline questionnaire responses and interviews, such as past illness / disease history, dietary, cognitive and physical measures. Purpose of the transfer The transfer is made to allow the Applicant to conduct the Permitted Purpose. Recipients The Participant Level Data transferred may be disclosed only to the following recipients or categories of recipients: • Authorised personnel within the Applicant, namely the Applicant Principal Investigator and Applicant Researchers; • Third Party Processors subject to the relevant provisions of the MTA; • Law enforcement agencies acting under Data Protection Legislation; • The relevant data protection authority acting under Data Protection Legislation; and • Auditors (UK Biobank or appropriate third parties). Processing activities The Participant Level Data will be subject to the following basic Processing activities: • Access and use of Participant Level Data within the research analysis platform for the Permitted Purpose; • Where approved by UK Biobank the transmission to, making available to and storage on the Researcher's systems/network servers, excluding any WGS (whole genome sequence) or XXX (whole exome sequence) files which must not be transmitted or downloaded from the research analysis platform; • research operations, including a Processor Task by a Third Party Processor; and • risk management, compliance, legal and audit functions. UK Biobank's lawful basis for sharing Personal Data Personal Data: • Legitimate interests (Article 6(1)(f) UK GDPR) Special Categories of Data: • Scientific research purpose (Article 9(2)(j) UK GDPR) 3 For further information about this MTA’s Data Protection clauses and an explanation of UK Biobank’s position in relation to Data Protection, please see the FAQs on the UK Biobank website (which shall be updated by UK Biobank from time to time). UK Biobank’s DPO contact details: XXX@xxxxxxxxx.xx.xx Applicant’s DPO contact details: Annex 2 Security Measures UK Biobank has a legal obligation under the UK GDPR to ensure that its Materials are stored, retrieved and used securely, with appropriate organisational and technical measures in place. UK Biobank must also take reasonable steps to ensure that Materials it shares continue to be protected with adequate security. This Annex 2 forms part of the MTA and represents the minimum level of security standards for data storage, retrieval and usage that the Applicant must comply with. This Annex 2 may be updated by UK Biobank from time-to-time. The objective of these security measures is to ensure that Materials provided by UK Biobank are secured and treated as though they are Personal Data, and with particular respect to: • Confidentiality – data are secured with organisational and technical measures in place to restrict access only to authorised users and protected from unauthorised access by internal and external threats; and • Integrity – data remains accurate and complete to support high quality research to be undertaken.
Appears in 1 contract
Samples: Transfer Agreement
Data Processing Description. This Annex 1 forms part of this MTA and describes the types of Participant Level Data disclosed by UK Biobank to the Applicant Collaborator, the Lead Collaborator and Applicant Collaborator Researchers to process strictly for the Permitted Purpose described in this MTA (or as otherwise agreed in writing by the parties).3 parties).4 Data subjects The Participants Categories of data The Participant Level Data to be Processed processed concern the following categories of Personal Datapersonal data: EIDs – the encoded and unique pseudonymised identifiers identifiers, which are specific to the Approved Research Project; and data derived from baseline questionnaire responses and interviews which do not contain special category data, such as birthplace, early life and education, employment history, marital status and number of children. Special categories of data The Participant Level Data to be Processed processed concern the following special categories of data: The UK Biobank Resource resource contains health, genetic and biometric data. All special categories of data contained in the Materials is de-identified (the direct and indirect identifiers are removed). The types of special category of data may include: measures of the Participant’s phenotype, such as height, weight and blood pressure (approximately 2,000 phenotypes per Participant, as further detailed here xxxx://xxxxxxx.xxxx.xx.xx.xx/showcase/schema.cgi?id=1 ) measures of the Participant’s genome, this includes genotype, exome sequence and whole xxxxxxxx xxxx; biomarkers created by assay of the Participant’s samples, which include common biomarkers (such as cholesterol), infectious disease markers, proteomic and metabolomic markers; imaging data (on up to 100,000 Participants) as the result of MRI scans of the head, the heart and the body, plus ultrasound and DEXA; and data derived from health record linkages including hospital records, primary care records, death and cancer registries or any other sources of clinical data; and other special category data derived from baseline baseline/online questionnaire responses and interviews, such as past illness / disease history, dietary, cognitive and physical measures. Purpose of the transfer The transfer is made to allow the Applicant Collaborator to conduct the Permitted Purpose. Recipients The Participant Level Data transferred may be disclosed only to the following recipients or categories of recipients: Authorised authorised personnel within the ApplicantCollaborator, namely the Applicant Principal Investigator Lead Collaborator and Applicant Collaborator Researchers; Third Party Processors subject to the relevant provisions of the MTA; Law Affiliates subject to the relevant provisions of the MTA; law enforcement agencies acting under Data Protection Legislation; The the relevant data protection authority acting under Data Protection Legislation; and Auditors auditors (UK Biobank or appropriate third parties). Processing activities The Participant Level Data will be subject to the following basic Processing processing activities: Access access and use of Participant Level Data within the research analysis platform for the Permitted Purpose; Where where approved by UK Biobank the transmission to, making available to and storage on the ResearcherCollaborator's systems/network servers, excluding any WGS (whole genome sequence) or XXX (whole exome sequence) files which must not be transmitted or downloaded from the research analysis platform; research operations, including a Processor Task by a Third Party Processor; and risk management, compliance, legal and audit functions. UK Biobank's lawful basis for sharing personal data Personal Data Personal Datadata: Legitimate interests (Article 6(1)(f) UK GDPR) Special Categories categories of Datadata: Scientific research purpose (Article 9(2)(j) UK GDPR) 3 For further information about this MTA’s Data Protection clauses and an explanation of UK Biobank’s position in relation to Data Protection, please see the FAQs on the UK Biobank website (which shall be updated by UK Biobank from time to time). UK Biobank’s DPO contact details: XXX@xxxxxxxxx.xx.xx ApplicantCollaborator’s DPO (or other person responsible for data protection) contact details: Annex 2 Security Measures UK Biobank has a legal obligation under the UK GDPR to ensure that its Materials are stored, retrieved and used securely, with appropriate organisational and technical measures in place. UK Biobank must also take reasonable steps to ensure that Materials it shares continue to be protected with adequate security. This Annex 2 forms part of the MTA and represents the minimum level of security standards for data storage, retrieval and usage that the Applicant must comply with. This Annex 2 may be updated by UK Biobank from time-to-time. The objective of these security measures is to ensure that Materials provided by UK Biobank are secured and treated as though they are Personal Data, and with particular respect to: Confidentiality – data are secured with organisational and technical measures in place to restrict access only to authorised users and protected from unauthorised access by internal and external threats; and Integrity – data remains accurate and complete to support high quality research to be undertaken.:
Appears in 1 contract
Samples: www.ukbiobank.ac.uk
Data Processing Description. This Annex 1 forms part of this MTA and describes the types of Participant Level Data disclosed by UK Biobank to the Applicant, the Applicant PI and Applicant Researchers to process strictly for the Permitted Purpose described in this MTA (or as otherwise agreed in writing by the parties).3 parties).4 Data subjects The Participants Categories of data The Participant Level Data to be Processed processed concern the following categories of Personal Datapersonal data: EIDs – the encoded and unique pseudonymised identifiers identifiers, which are specific to the Approved Research Project; and data derived from baseline questionnaire responses and interviews which do not contain special category data, such as birthplace, early life and education, employment history, marital status and number of children. Special categories of data The Participant Level Data to be Processed processed concern the following special categories of data: The UK Biobank Resource resource contains health, genetic and biometric data. All special categories of data contained in the Materials is de-identified (the direct and indirect identifiers are removed). The types of special category of data may include: measures of the Participant’s phenotype, such as height, weight and blood pressure (approximately 2,000 phenotypes per Participant, as further detailed here xxxx://xxxxxxx.xxxx.xx.xx.xx/showcase/schema.cgi?id=1 ) measures of the Participant’s genome, this includes genotype, exome sequence and whole xxxxxxxx xxxx; biomarkers created by assay of the Participant’s samples, which include common biomarkers (such as cholesterol), infectious disease markers, proteomic and metabolomic markers; imaging data (on up to 100,000 Participants) as the result of MRI scans of the head, the heart and the body, plus ultrasound and DEXA; and data derived from health record linkages including hospital records, primary care records, death and cancer registries or any other sources of clinical data; and other special category data derived from baseline baseline/online questionnaire responses and interviews, such as past illness / disease history, dietary, cognitive and physical measures. Purpose of the transfer The transfer is made to allow the Applicant to conduct the Permitted Purpose. Recipients The Participant Level Data transferred may be disclosed only to the following recipients or categories of recipients: Authorised authorised personnel within the Applicant, namely the Applicant Principal Investigator and Applicant Researchers; Third Party Processors subject to the relevant provisions of the MTA; Law Affiliates subject to the relevant provisions of the MTA; law enforcement agencies acting under Data Protection Legislation; The the relevant data protection authority acting under Data Protection Legislation; and Auditors auditors (UK Biobank or appropriate third parties). Processing activities The Participant Level Data will be subject to the following basic Processing processing activities: Access access and use of Participant Level Data within the research analysis platform for the Permitted Purpose; Where where approved by UK Biobank the transmission to, making available to and storage on the ResearcherApplicant's systems/network servers, excluding any WGS (whole genome sequence) or XXX (whole exome sequence) files which must not be transmitted or downloaded from the research analysis platform; research operations, including a Processor Task by a Third Party Processor; and risk management, compliance, legal and audit functions. UK Biobank's lawful basis for sharing personal data Personal Data Personal Datadata: Legitimate interests (Article 6(1)(f) UK GDPR) Special Categories categories of Datadata: Scientific research purpose (Article 9(2)(j) UK GDPR) 3 For further information about this MTA’s Data Protection clauses and an explanation of UK Biobank’s position in relation to Data Protection, please see the FAQs on the UK Biobank website (which shall be updated by UK Biobank from time to time). UK Biobank’s DPO contact details: XXX@xxxxxxxxx.xx.xx Applicant’s DPO (or other person responsible for data protection) contact details: Annex 2 Security Measures UK Biobank has a legal obligation under the UK GDPR to ensure that its Materials are stored, retrieved and used securely, with appropriate organisational and technical measures in place. UK Biobank must also take reasonable steps to ensure that Materials it shares continue to be protected with adequate security. This Annex 2 forms part of the MTA and represents the minimum level of security standards for data storage, retrieval and usage that the Applicant must comply with. This Annex 2 may be updated by UK Biobank from time-to-time. The objective of these security measures is to ensure that Materials provided by UK Biobank are secured and treated as though they are Personal Data, and with particular respect to: Confidentiality – data are secured with organisational and technical measures in place to restrict access only to authorised users and protected from unauthorised access by internal and external threats; and Integrity – data remains accurate and complete to support high quality research to be undertaken.:
Appears in 1 contract
Samples: Transfer Agreement
Data Processing Description. This Annex 1 forms part of this MTA and describes the types of Participant Level Data disclosed by UK Biobank to the Applicant and Applicant Researchers to process strictly for the Permitted Purpose described in this MTA (or as otherwise agreed in writing by the parties).3 parties).4 Data subjects The Participants Categories of data The Participant Level Data to be Processed processed concern the following categories of Personal Datapersonal data: EIDs – the encoded and unique pseudonymised identifiers identifiers, which are specific to the Approved Research Project; and data derived from baseline questionnaire responses and interviews which do not contain special category data, such as birthplace, early life and education, employment history, marital status and number of children. Special categories of data The Participant Level Data to be Processed processed concern the following special categories of data: The UK Biobank Resource resource contains health, genetic and biometric data. All special categories of data contained in the Materials is de-identified (the direct and indirect identifiers are removed). The types of special category of data may include: measures of the Participant’s phenotype, such as height, weight and blood pressure (approximately 2,000 phenotypes per Participant, as further detailed here xxxx://xxxxxxx.xxxx.xx.xx.xx/showcase/schema.cgi?id=1 ) measures of the Participant’s genome, this includes genotype, exome sequence and whole xxxxxxxx xxxx; biomarkers created by assay of the Participant’s samples, which include common biomarkers (such as cholesterol), infectious disease markers, proteomic and metabolomic markers; imaging data (on up to 100,000 Participants) as the result of MRI scans of the head, the heart and the body, plus ultrasound and DEXA; and data derived from health record linkages including hospital records, primary care records, death and cancer registries or any other sources of clinical data; and other special category data derived from baseline baseline/online questionnaire responses and interviews, such as past illness / disease history, dietary, cognitive and physical measures. Purpose of the transfer The transfer is made to allow the Applicant to conduct the Permitted Purpose. Recipients The Participant Level Data transferred may be disclosed only to the following recipients or categories of recipients: Authorised authorised personnel within the Applicant, namely the Applicant Principal Investigator and Applicant Researchers; Third Party Processors subject to the relevant provisions of the MTA; Law law enforcement agencies acting under Data Protection Legislation; The the relevant data protection authority acting under Data Protection Legislation; and Auditors auditors (UK Biobank or appropriate third parties). Processing activities The Participant Level Data will be subject to the following basic Processing processing activities: Access access and use of Participant Level Data within the research analysis platform for the Permitted Purpose; Where where approved by UK Biobank the transmission to, making available to and storage on the ResearcherApplicant's systems/network servers, excluding any WGS (whole genome sequence) or XXX (whole exome sequence) files which must not be transmitted or downloaded from the research analysis platform; research operations, including a Processor Task by a Third Party Processor; and risk management, compliance, legal and audit functions. UK Biobank's lawful basis for sharing personal data Personal Data Personal Datadata: Legitimate interests (Article 6(1)(f) UK GDPR) Special Categories categories of Datadata: Scientific research purpose (Article 9(2)(j) UK GDPR) 3 For further information about this MTA’s Data Protection clauses and an explanation of UK Biobank’s position in relation to Data Protection, please see the FAQs on the UK Biobank website (which shall be updated by UK Biobank from time to time). UK Biobank’s DPO contact details: XXX@xxxxxxxxx.xx.xx Applicant’s DPO (or other person responsible for data protection) contact details: Annex 2 Security Measures UK Biobank has a legal obligation under the UK GDPR to ensure that its Materials are stored, retrieved and used securely, with appropriate organisational and technical measures in place. UK Biobank must also take reasonable steps to ensure that Materials it shares continue to be protected with adequate security. This Annex 2 forms part of the MTA and represents the minimum level of security standards for data storage, retrieval and usage that the Applicant must comply with. This Annex 2 may be updated by UK Biobank from time-to-time. The objective of these security measures is to ensure that Materials provided by UK Biobank are secured and treated as though they are Personal Data, and with particular respect to: Confidentiality – data are secured with organisational and technical measures in place to restrict access only to authorised users and protected from unauthorised access by internal and external threats; and Integrity – data remains accurate and complete to support high quality research to be undertaken.:
Appears in 1 contract
Samples: Transfer Agreement
Data Processing Description. This Annex 1 forms part of this MTA and describes the types of Participant Level Data disclosed by UK Biobank to the Applicant and Applicant Researchers to process strictly for the Permitted Purpose described in this MTA (or as otherwise agreed in writing by the parties).3 Data subjects The Participants Categories of data The Participant Level Data to be Processed concern the following categories of Personal Data: • EIDs – the encoded and unique pseudonymised identifiers which are specific to the Approved Research Project; and • data derived from baseline questionnaire responses and interviews which do not contain special category data, such as birthplace, early life and education, employment history, marital status and number of children. Special categories of data The Participant Level Data to be Processed concern the following special categories of data: The UK Biobank Resource contains health, genetic and biometric data. All special categories of data contained in the Materials is de-identified (the direct and indirect identifiers are removed). The types of special category of data may include: • measures of the Participant’s phenotype, such as height, weight and blood pressure (approximately 2,000 phenotypes per Participant, as further detailed here xxxx://xxxxxxx.xxxx.xx.xx.xx/showcase/schema.cgi?id=1 ) • measures of the Participant’s genome, this includes genotype, exome sequence and whole xxxxxxxx xxxx; • biomarkers created by assay of the Participant’s samples, which include common biomarkers (such as cholesterol), infectious disease markers, proteomic and metabolomic markers; • imaging data (on up to 100,000 Participants) as the result of MRI scans of the head, the heart and the body, plus ultrasound and DEXA; and • data derived from health record linkages including hospital records, primary care records, death and cancer registries or any other sources of clinical data; and • special category data derived from baseline questionnaire responses and interviews, such as past illness / disease history, dietary, cognitive and physical measures. Purpose of the transfer The transfer is made to allow the Applicant to conduct the Permitted Purpose. Recipients The Participant Level Data transferred may be disclosed only to the following recipients or categories of recipients: • Authorised personnel within the Applicant, namely the Applicant Principal Investigator and Applicant Researchers; • Third Party Processors subject to the relevant provisions of the MTA; • Law enforcement agencies acting under Data Protection Legislation; • The relevant data protection authority acting under Data Protection Legislation; and • Auditors (UK Biobank or appropriate third parties). Processing activities The Participant Level Data will be subject to the following basic Processing activities: • Access and use of Participant Level Data within the research analysis platform for the Permitted Purpose; • Where approved by UK Biobank the transmission to, making available to and storage on the Researcher's systems/network servers, excluding any WGS (whole genome sequence) or XXX WES (whole exome sequence) files which must not be transmitted or downloaded from the research analysis platform; • research operations, including a Processor Task by a Third Party Processor; and • risk management, compliance, legal and audit functions. UK Biobank's lawful basis for sharing Personal Data Personal Data: • Legitimate interests (Article 6(1)(f) UK GDPR) Special Categories of Data: • Scientific research purpose (Article 9(2)(j) UK GDPR) 3 For further information about this MTA’s Data Protection clauses and an explanation of UK Biobank’s position in relation to Data Protection, please see the FAQs on the UK Biobank website (which shall be updated by UK Biobank from time to time). UK Biobank’s DPO contact details: XXX@xxxxxxxxx.xx.xx Applicant’s DPO contact details: Annex 2 Security Measures UK Biobank has a legal obligation under the UK GDPR to ensure that its Materials are stored, retrieved and used securely, with appropriate organisational and technical measures in place. UK Biobank must also take reasonable steps to ensure that Materials it shares continue to be protected with adequate security. This Annex 2 forms part of the MTA and represents the minimum level of security standards for data storage, retrieval and usage that the Applicant must comply with. This Annex 2 may be updated by UK Biobank from time-to-time. The objective of these security measures is to ensure that Materials provided by UK Biobank are secured and treated as though they are Personal Data, and with particular respect to: • Confidentiality – data are secured with organisational and technical measures in place to restrict access only to authorised users and protected from unauthorised access by internal and external threats; and • Integrity – data remains accurate and complete to support high quality research to be undertaken.
Appears in 1 contract
Samples: Transfer Agreement
Data Processing Description. This Annex 1 forms part of this MTA and describes the types of Participant Level Data disclosed by UK Biobank to the Applicant, the Applicant PI and Applicant Researchers to process strictly for the Permitted Purpose described in this MTA (or as otherwise agreed in writing by the parties).3 parties).4 Data subjects The Participants Categories of data The Participant Level Data to be Processed processed concern the following categories of Personal Datapersonal data: • EIDs – the encoded and unique pseudonymised identifiers identifiers, which are specific to the Approved Research Project; and • data derived from baseline questionnaire responses and interviews which do not contain special category data, such as birthplace, early life and education, employment history, marital status and number of children. Special categories of data The Participant Level Data to be Processed processed concern the following special categories of data: The UK Biobank Resource resource contains health, genetic and biometric data. All special categories of data contained in the Materials is de-identified (the direct and indirect identifiers are removed). The types of special category of data may include: • measures of the Participant’s phenotype, such as height, weight and blood pressure (approximately 2,000 phenotypes per Participant, as further detailed here xxxx://xxxxxxx.xxxx.xx.xx.xx/showcase/schema.cgi?id=1 ) • measures of the Participant’s genome, this includes genotype, exome sequence and whole xxxxxxxx xxxx; • biomarkers created by assay of the Participant’s samples, which include common biomarkers (such as cholesterol), infectious disease markers, proteomic and metabolomic markers; • imaging data (on up to 100,000 Participants) as the result of MRI scans of the head, the heart and the body, plus ultrasound and DEXA; and • data derived from health record linkages including hospital records, primary care records, death and cancer registries or any other sources of clinical data; and • other special category data derived from baseline baseline/online questionnaire responses and interviews, such as past illness / disease history, dietary, cognitive and physical measures. Purpose of the transfer The transfer is made to allow the Applicant to conduct the Permitted Purpose. Recipients The Participant Level Data transferred may be disclosed only to the following recipients or categories of recipients: Authorised • authorised personnel within the Applicant, namely the Applicant Principal Investigator and Applicant Researchers; • Third Party Processors subject to the relevant provisions of the MTA; Law • Affiliates subject to the relevant provisions of the MTA; • law enforcement agencies acting under Data Protection Legislation; The • the relevant data protection authority acting under Data Protection Legislation; and Auditors • auditors (UK Biobank or appropriate third parties). Processing activities The Participant Level Data will be subject to the following basic Processing processing activities: Access • access and use of Participant Level Data within the research analysis platform for the Permitted Purpose; Where • where approved by UK Biobank the transmission to, making available to and storage on the ResearcherApplicant's systems/network servers, excluding any WGS (whole genome sequence) or XXX (whole exome sequence) files which must not be transmitted or downloaded from the research analysis platform; • research operations, including a Processor Task by a Third Party Processor; and • risk management, compliance, legal and audit functions. UK Biobank's lawful basis for sharing personal data Personal Data Personal Datadata: • Legitimate interests (Article 6(1)(f) UK GDPR) Special Categories categories of Datadata: • Scientific research purpose (Article 9(2)(j) UK GDPR) 3 For further information about this MTA’s Data Protection clauses and an explanation of UK Biobank’s position in relation to Data Protection, please see the FAQs on the UK Biobank website (which shall be updated by UK Biobank from time to time). UK Biobank’s DPO contact details: XXX@xxxxxxxxx.xx.xx Applicant’s DPO (or other person responsible for data protection) contact details: Annex 2 Security Measures UK Biobank has a legal obligation under the UK GDPR to ensure that its Materials are stored, retrieved and used securely, with appropriate organisational and technical measures in place. UK Biobank must also take reasonable steps to ensure that Materials it shares continue to be protected with adequate security. This Annex 2 forms part of the MTA and represents the minimum level of security standards for data storage, retrieval and usage that the Applicant must comply with. This Annex 2 may be updated by UK Biobank from time-to-time. The objective of these security measures is to ensure that Materials provided by UK Biobank are secured and treated as though they are Personal Data, and with particular respect to: Confidentiality – data are secured with organisational and technical measures in place to restrict access only to authorised users and protected from unauthorised access by internal and external threats; and Integrity – data remains accurate and complete to support high quality research to be undertaken.:
Appears in 1 contract
Samples: Transfer Agreement
