privacy

PRIVACY STATEMENT

The researchers are requesting email addresses for undergraduate students. These email addresses will be used to contact students in order to request that they participate in a web-based survey regarding tobacco. The email addresses will be used for no other purpose, and the email addresses will be destroyed upon completion of the survey.

The computer program being used is designed to keep personal identifiers separate (e-mail addresses) from information collected from the respondent.  The sample database (in this case e-mail addresses) is kept in a separate file from the data collected from the respondent.  The only common identifier that is in both databases is a respondent id number.  This link will be destroyed as soon as the data collection is completed (SSRC policy).  Meanwhile, only Qualtrics has access to all the files. Qualtrics has SAS 70 Certification and meets the rigorous privacy standards imposed on health care records by the Health Insurance Portability and Accountability Act (HIPAA). All Qualtrics accounts are hidden behind passwords and all data is protected with real-time data replication. Qualtrics only stores data in data centers that have historically received unbiased favorable SAS 70 Type II audits annually. Within the Qualtrics HQ, access is only available for those with photo ID badges and there is video surveillance.  Within the server room, access is only available for those with ID cards and a key. There is also video surveillance. In the AWS Data centers, there are 24/7 security guards, video surveillance, and manual and automatic logged access through RFID and cabinet keys. Within the ViaWest Data Centers there are 24/7 security guards, video surveillance, and manual and automatic logged access through RFID and cabinet keys. This approach has been applied successfully by Qualtrics to collect data via web-based surveys while protecting the confidentiality of the respondents.

Upon completion of survey administration, the sample database file will be destroyed and the unique identifier will be removed from the questionnaire database file.

______________________________
Nell Valentine, Principal Investigator