Background

To facilitate neuroimaging data sharing, a template data sharing consent form was generated by pooling forms from many places and being reviewed by ethic experts and lawyers. This consent doesn’t comply with GDPR, and work has been done during the 2019 OHBM Hackathon toward updating the consent: see this google doc

Issues to address during the workshop

Anonymization

Following the OBC, data must be de-identified before distribution. However, it has become clear that one can single out subjects from biomedical data and/or MRI scans (including fMRI profiles from connectivity). This means that changes to the data (removing ID and defacing) is only a pseudo-anonymization procedure and according to GDPR, that procedure leaves the data as ‘personal’ (as oppososed to ‘anonymized’).

GDPR

There are specific items required in a consent form that needs to be updated: data controller, data processor, legal basis, right to withdraw, info and contact of the data protection officer, how data are pseudoanonymized, infrastructure where data are stored, where data are shared, how people will access data, signature of who collected the consent, where and when.

GDPR doesn’t allow sharing freely personal data outside the EEA –> a data user agreement must be used, limiting redistribution, exclusing attempt to reidentify, and including what to do re-identification occurs.

Clinical Data

When collecting data from patients, there are some specifics aspects to consider that should be included (as a sperated template).

Infrastructure document

GLiMR approach for data sharing – local vs global repository

Goal

Schedule

We streamed the morning session on google hangout.

  • 10.00 Sharing brain MRI data under GDPR (Cyril Pernet)
  • 10.40 Introduction to the OBC (Stephan Heunis)
  • 11.15 Issuing a Data User Agreement - exemple from the Donders (Robert Oostenvelt)
  • 12.00 Collecting and sharing Patients data (Francesca Benedetta Pizzini)
  • 12.30 General Discussion (Nils Broeckx, chairing/answering GDPR questions)
  • 13.30 Split per working groups to update the documentation
  • 16.00 Wrap-up

From there, discussion on github followed to update all documentation.

Workshop Participants

surname name email expertise
Pernet Cyril cyril.pernet@ed.ac.uk neuroinformatics, data management
Katsaros Vasilis bslkatsaros@gmail.com clinical
Mutsaerts Henk-Jan henkjanmutsaerts@gmail.com signal processing
Benedetta Pizzini Francesca francesca.pizzini@aovr.veneto.it clinical
Barker Gareth gareth.barker@kcl.ac.uk ethic, multi-centre trials
Heunis Stephan jsheunis@gmail.com cognitive neuroscience, method, OBC
Herholz Peer herholz.peer@gmail.com cognitive neuroscience, method, OBC
Oostenveld Robert r.oostenveld@donders.ru.nl ethic, data management
Broeckx Nils nils.broeckx@dewallens-partners.be law, GDPR