#### 3.4 Safe Havens

This section indicates if your proposal intends to use the services of a Scottish Government-accredited research Safe Haven. A list of recognised safe havens is included in Table3 of Appendix A. Safe Havens provide a physical and technical environment designed to facilitate the safe processing of data; their use represents a significant control and provides additional assurance. The use of the national safe haven (see below) is normally expected where processing data from the national datasets or from PHS or NHS NSS. If you are proposing to access data exclusively through a recognised safe haven, then you will not need to complete sections 5.1 or 5.2 of the form. Please note that you may be asked to use a safe haven as a condition of your approval if the panel feel it is appropriate.

National Safe Haven: eDRIS, Public Health Scotland (PHS) and the University of Edinburgh host secure access points to the National Safe Haven at the Edinburgh BioQuarter. The National Safe Haven is a secure workspace environment where your data will be stored and can be accessed and analysed using statistical analysis software packages. Microsoft Office packages are also available for use. The National Safe Haven can also be accessed remotely by approved researchers from approved institutions.

3.4.01 Please indicate whether you intend to access data exclusively through any Scottish Government- accredited safe haven. This would be the case only where data (existing or newly created) is being accessed and processed exclusively within the confines of the safe haven environment, and would not be transferred beyond this environment, and is not being processed in any way before being placed in a safe haven. 3.4.02 If you are requesting access to data for which PHS or NHS NSS is the Data Controller, and you do not intend to do this through the National Safe Haven, please explain why. PHS or NHS NSS data are typically processed from within the National Safe Haven: if your proposal seeks to process PHS or NHS NSS data out-with this environment, you should provide a full explanation as to why this is the most appropriate way of processing the data. If you are not obtaining national data, this should be stated. 3.4.03 If you answered Yes to Q 3.4.01, please choose whether this is the National Safe Haven or a Regional Safe Haven from the drop-down menu. If you are using the National Safe Haven, you do not need to complete sections 5.1 and 5.2 of the form. 3.4.03a If you are using a Regional Safe Haven, please specify which one. 3.4.04b If you are requesting access to national data for which PHS or NHS NSS is the Data Controller, and you do not intend to do this through the National Safe Haven, please explain why. PHS or NHS NSS data are typically processed from within the National Safe Haven: if your proposal seeks to process PHS or NHS NSS data out-with this environment, you should provide a full explanation as to why this is the most appropriate way of processing the data. If you are not obtaining national data, this should be stated. If you are using a Regional Safe Haven, normally you do not need to complete sections 5.1 and 5.2 of the form. However, if you require NHS Central Register (NHSCR) cancer flagging data and wish to access your data through a Regional Safe Haven, you will need to complete sections 5.1 and 5.2. This is a requirement of NHSCR. 3.4.04 Please state how and from what location you will access the safe haven specified (e.g. remotely from on a university-provided laptop from a university office; e .g. using a safe setting from… (specify location).