Security refers to two main areas: 1) safeguarding the integrity of the data itself and 2) restricting access to sensitive data (such as geographic, administrative, or medical information about individuals).


  • Everyone should keep their digital data safe from attack by computer malware.
  • If you work with sensitive data, you may need to comply with requirements and policies of the university, state, federal government, and granting agencies for keeping it private.  Some of the following policies may be applicable:
Funding AgencyRequirementDetails
NSFRequires a maximum 2 page data plan with all proposals

Plans for data management and sharing of the products of research
NIHRequires a paragraph following the Research Plan section of the proposal that describes how data will be shared. This applies to investigators seeking $500,000 or more in direct costs in any yearNIH Data Sharing Information
NASARequires a data sharing plan as part of the Scientific/Technical/Management section of proposals

Guidebook for Proposers


The same recommendations for keeping protecting digital information in other areas of your life apply to the valuable digital assets from your research:
PolicyDescriptionHow to Comply
UW-Madison data policiesProtects sensitive personal data handled by UW-Madison personnel in the course of their work.Campus IT policies, including those for sensitive information.
Methods for handling restricted data.
FERPA (Family Educational Rights and Privacy Act)Laws protecting private student data and its access by parents, schools, and others.Guidance from the Family Policy Compliance Office at the Department of Education.
HIPAA (Health Insurance Portability and Accountability Act)Rules safeguarding the privacy of personal health information and its access by health care providers and others. Resources to assist UW-Madison researchers with HIPAA compliance.


The following campus resources may be able to help you with questions or specific needs regarding data security:

Resource Description
Campus Office of Cybersecurity Provides information on security policies and may be able to assist you with methods for restricting access to sensitive data.
Data & Information Services Center (DISC) in Social SciencesHas staff expertise and facilities for working with restricted data.