HCP-DPA

Last modified by michaels on 2024/06/24 15:12

Data Processing Agreement for HCP Young Adult Connectomes

Use and access of the HCP Young Adult Connectomes data set is governed by the permissions, rules and obligations set out in the accompanying

What can I find here?

  • The Drive of this collab contains a pre-filled DPA for the HCP Young Adult Dataset. Important: to enter the Drive you need to be logged in.
  • The agreement is made between controllers and processors of the data set, mutually assuring compliance with the General Data Protection Regulation.
  • The data is shared via the Virtual Research Environment (VRE) at Charité – Universitätsmedizin Berlin. Prospective Processors fill the pre-filled DPA as described below and send it to the controller to form a data processing agreement as legal basis for processing under GDPR.
  • Further information about VRE onboarding can be found here.

Process

  • Prospective Processors fill the pre-filled DPA in the Drive of this Collab with their information. Specifically, they enter 
    • Annex I:
      • Names and Addresses of all Prospective Processors
      • Contact information of the responsible institutional Data Protection Officer
      • Signature (either by printing and scanning or with a valid digital signature)
    • Annex II: Duration of the processing
    • Annex III: Prospective Processors add to the list of technical and organisational measures carried out to ensure the security of the data, particularly in regard to the safety of the processing after downloading and decrypting the data.
  • Prospective Processors send the signed document to the controller (petra.ritter@bih-charite.de) which will evaluate and sign the agreement and arrange the transmission of the data.

License note

We explicitly grant re-use of the overall dataset under the Creative Commons License Attribution-ShareAlike 4.0 International. The license explicitly grants reuse of all non-personal aspects of the dataset. Importantly, the personal data contained within this data set is governed by the EU General Data Protection Regulation. As a consequence, the license only applies to non-personal aspects of the dataset, for example, relating to the structure and organization of the dataset or the way the dataset was produced, but not to the personal information contained within the dataset.

Reference publication

Schirner, Michael, Gustavo Deco, and Petra Ritter. "Learning how network structure shapes decision-making for bio-inspired computing." Nature Communications 14.1 (2023): 2963.

Public

HCP-DPA