Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update to the export instructions for secondary use data #2226

Open
wants to merge 5 commits into
base: master
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions docs/data/sensitive-data/sd-desktop-audited.md
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@ Contents:

* After login to SD Desktop, the user can start a pre-built computing environment (Linux OS), on-demand; available options offer the capability of doing simple statistical analysis to machine learning.

* To comply with the regulation, virtual Desktops for secondary use are completely isolated from the internet and other services: you can only access the data you have requested from the data controller;
* To comply with the regulation, virtual Desktops for secondary use are completely isolated from the internet and other services: you can only access the data you have requested from the data controller.

* SD Desktop can be used to work with any type of data: text files, images, audio files, video, and genetic data. However, the virtual desktop includes [a limited set of pre-installed software](../../data/sensitive-data/sd-desktop-secondary-access.md#pre-installed-software) (open source). Only the permit authority can approve the use of additional software/files/scripts and import them into your virtual Desktop.

Expand All @@ -34,7 +34,7 @@ To comply with the regulation, SD Desktop for secondary use is **completely isol

**The import of data and software is restricted in SD Desktop**. You cannot import any data or software yourself for security reasons. If you are working with a dataset for which you have received a permit from the data controller, the only way to access the data for analysis is by utilizing a specific application called **Data Gateway**.

**Data export from SD Desktop is also restricted**. Only *non-sensitive* results can be exported from the workspace, and those can only be exported by the CSC project manager. Instructions for exporting your results are provided in the next paragraph.
**Data export from SD Desktop is also restricted**. Non-sensitive results can be exported from the workspace only by CSC. Instructions for exporting your results are provided in the [Export data -section](sd-desktop-secondary-export.md).

Encrypted files will be **visible in read-only mode**. This solution allows you to process large amounts of data without storing any copy on your virtual Desktop. However, this means that the files cannot be edited in SD Desktop.

Expand All @@ -43,13 +43,13 @@ Lastly, we are not yet providing a virtual Desktop with Windows operating system

## Before you start

* You need to have a data permit issued by Findata or single register before starting the service access process at CSC.
* You need to have a data permit issued by Findata or a single register before starting the service access process at CSC.

* All the members belonging to a specific CSC project can access the same computing virtual Desktop. Currently, it is possible to launch 3 virtual Desktops (or computing environment) for each CSC project. Each CSC project has its private Desktop, and each Desktop is isolated from other CSC projects or CSC accounts.

* Audited SD Desktop has few important limitations: the CSC project will be managed by the service desk and the data transfer will be restricted (including user’s own script and programs).

* After your data permit expires, you will no longer have access to your virtual Desktop. To continue working with the same project, you need to send an amendment application to the data controller. Otherwise, make sure to request to export all your results before the validity period of your data permit ends. The expired project and all the data will be deleted after 90 days according to CSC's data retention policy.
* After your data permit expires, the CSC project will be closed and you will no longer have access to your virtual Desktop. To continue working with the same project, you need to send an amendment application to the data controller. Otherwise, make sure to request to export all your results before the validity period of your data permit ends. The expired project and all the data will be deleted after 90 days according to CSC's data retention policy.

!!! Note
We recommend you to **[contact CSC Service Desk](../../support/contact.md) well in advance**, even before applying for a data permit, if you need **software that is not available** on the Desktop as a default.
Expand Down
26 changes: 14 additions & 12 deletions docs/data/sensitive-data/sd-desktop-secondary-export.md
Original file line number Diff line number Diff line change
@@ -1,26 +1,28 @@
# Data export from virtual desktop

Your virtual desktop is completely isolated from the internet and other services for information security reasons. Only the CSC project manager can export non-sensitive results from the secure workspace.
Your virtual desktop is completely isolated from the internet and other services for information security reasons. Data export is also restricted: only CSC can export non-sensitive results from the secure workspace when processing secondary use data.

**In order to export the results at the end of your analysis, you need to:**

1. Make sure your results **do not contain any sensitive data**;
2. Collect all the results into a same folder and name it as **Results**;
3. Place the **Results** folder into the **shared-directory** on your Desktop;
4. **Send a request to [CSC Service Desk](../../support/contact.md)** to export your results.
5. All the content in the “Results” folder will be exported to the data permit authority, and it will be available for you after their scrutiny. During the export, you will not be able to access your virtual Desktop. All the project members have to be removed from the CSC project for the duration of the data export. Afterwards, you will be invited back to the CSC project, if your project is still ongoing.

[![Desktop-register-export](images/desktop/desktop-register-exp.png)](images/desktop/desktop-register-exp.png)
1. Download and complete Findata's [summary form for verifying the anonymity of the results](https://findata.fi/summary-form-verifying-anonymity-of-results);
2. Send the completed form to [email protected];
3. Make sure your results **do not contain any sensitive data**;
4. Collect all the results into a same folder and name it as **Results**;
5. Place the **Results** folder into the **shared-directory** on your Desktop;
6. **Send a request to [CSC Service Desk](../../support/contact.md)** to export your results;
7. All the content in the “Results” folder will be exported to the data permit authority, and it will be available for you after their scrutiny. During the export, you will not be able to access your virtual Desktop. All the project members have to be removed from the CSC project for the duration of the data export. Afterwards, you will be invited back to the CSC project, if your project is still ongoing;
8. You will receive instructions on how to create a new CSC project in SD Connect, after which the Sensitive Data Support -team will share the results to you via SD Connect.

![Exporting results from virtual desktop](https://a3s.fi/docs-files/sensitive-data/SD_Desktop/Exporting_secondary_use_data.png)

## Deleting virtual desktop

### Deleting a desktop

At the end of your analysis, you can delete your virtual desktop, including the external volume and all files saved in it. You cannot undo this action:
At the end of your analysis, you can delete your virtual desktop, including the external volume and all files saved on it. You cannot undo this action:

1. On [SD Desktop Homepage](https://sd-desktop.csc.fi), click on **Go to SD Desktop management**.
2. Under *Available desktops* select the correct virtual Desktop. On the right side, click on **Options** and on **Delete Desktop**.
1. On [SD Desktop Homepage](https://sd-desktop.csc.fi), click **Go to SD Desktop management**.
2. Under *Available desktops* select the correct virtual Desktop. On the right side, click **Options** and **Delete Desktop**.

[![Desktop-delete](images/desktop/desktop-deleting.png)](images/desktop/desktop-deleting.png)

Expand All @@ -31,6 +33,6 @@ At the end of your analysis, you can delete your virtual desktop, including the

Access to the data will be denied after the data permit expires. If you want to continue accessing the data after the original validity period ends, you need to send an *amendment application* to the data controller to extend the validity of the permit.

When the data permit has expired, all the members will be removed from the CSC project, and you cannot access your virtual Desktop anymore. This also means that **all your results must be exported before the end of the validity period**. Both the project and the data will be deleted according to CSC’s data retention policy (see [General Terms of Use for CSC's Services for Research and Education](https://research.csc.fi/general-terms-of-use)) and agreement with the users. As a default, **inactive projects and all their data will be deleted after 90 days** in accordance with the regulation.
When the data permit has expired, the CSC project will be closed, and you cannot access your virtual Desktop anymore. This means that **all your results must be exported before the end of the validity period**. Both the project and the data will be deleted according to CSC’s data retention policy (see [General Terms of Use for CSC's Services for Research and Education](https://research.csc.fi/general-terms-of-use)) and agreement with the users. As a default, **inactive projects and all their data will be deleted after 90 days** in accordance with the regulation.

If you are still waiting for a decision about your amendment application when the original permit expires, please contact [CSC Service Desk](../../support/contact.md) in order to save your CSC project and data for later use. We cannot grant access to the Desktop without a valid data permit.