You must include your data retention plans in the letter of intent or informed consent for research projects involving human participants. Your plans should include:
- How long you will be retaining your data for analytical purposes
- Whether you need to retain the data according to any disciplinary specific timelines or wise practices, requirements of a publisher, sensitive data guidelines, or based on type of data.
For medium- to high risk data:
- A plan for the timely and necessary deletion of personal information should be put together at the start of any project. Consult with IT Services about methods for ensuring permanent deletion of sensitive information.
- Linking files and the included personal information should be destroyed/deleted when no longer required to increase privacy.
- Original video and audio recordings should be deleted once they are no longer needed.
- Any physical material or hardcopies (e.g. print, written) must be destroyed after appropriate retention periods per the Records and Information Management Policy and Procedure.
