In order to comply with the terms set forth in Data Use Agreements, Cornell Restricted Access Data Center (CRADC) must limit system and network access only to authorized users. This policy covers all stages in the life‐cycle of user access, including authorizing access, granting initial access, updating access as user roles change, and removing users who no longer require access. READ MORE

The fundamental obligation of the Cornell Restricted Access Data Center (CRADC) is to protect restricted‐access research data that are confidential due to applicable laws and regulations, by means of contract or agreement, and University policies. READ MORE

This policy is to establish secure standards for the sharing, transmission and distribution of restricted data. READ MORE

This policy establishes measures that must be taken to report and respond to a possible breach or compromise of restricted data, including the determination of the systems affected, whether any restricted data have in fact been compromised, what specific data were compromised and what actions are required for forensic investigation and legal compliance. READ MORE

In order to comply with the terms set forth in the Data Use Agreement, Cornell Restricted Access Data Center (CRADC) staff must certify to the Data Provider that the associated data have been destroyed and/or returned to the Data Provider at the termination of the agreement. This policy applies to all research data regardless of the storage medium (e.g., disk drive, electronic tape, CD, DVD, external drive, paper, fiche, etc.) and regardless of form (e.g., text, graphic, video, audio, etc.), physically housed within the Cornell Institute for Social and Economic Research (CISER) auspices. READ MORE