All of Us Research Hub Privacy Policy
The following privacy policy discloses the information gathering and dissemination practices for the Vanderbilt University Medical Center (“VUMC”) Data and Research Center (“DRC”) Research Hub application accessed via the website https://www.ResearchAllofUs.org. By using the Research Hub, you agree to the collection and use of information in accordance with this policy. This Privacy Policy is effective as of 05/11/2018.
INFORMATION GATHERING
The Research Hub collects email addresses from site visitors who voluntarily provide an email address on the Get Updates form.
We also collect information that your browser sends whenever you visit the Research Hub website (“Log Data”). This Log Data may include information such as your computer’s Internet Protocol (IP) address, browser type, browser version, which pages of the Research Hub that you visit, the time and date of your visit, the time spent on individual pages, and other statistics. Voluntarily provided email addresses may also be tracked in Log Data. We do not collect Personally Identifiable Information (“PII”), and we do not link IP addresses to any personally identifying information. User sessions will be tracked, but users will remain anonymous.
In addition, we use web tools such as Google Analytics that collect, monitor, and analyze Log Data. User information (email address) is not included in the Google Analytics tracking, but it can be internally linked within the Research Hub development team.
USE OF INFORMATION AND INFORMATION SHARING
The Research Hub uses the email addresses collected through the Research Hub to provide you information about news and updates regarding the Research Hub, the All of Us Research Program (the “Program”), and other email communication related to the program and website. Email addresses are shared with a third-party service, MailChimp, which stores the information in MailChimp-managed databases. Email addresses may also be shared with authorized DRC partners, including the National Institutes of Health. Web server logs are retained on a temporary basis and then deleted completely from the systems.
We do not sell any information you provide to the Research Hub.
SECURITY
This site has security measures in place to prevent the loss, misuse, or alteration of the information under our control. We have implemented security controls at the FISMA Moderate baseline, leveraged from NIST 800-53, to build a robust security framework. Vanderbilt University Medical Center and the DRC, however, are not liable for the loss, misuse, or alteration of information on this site by any third party.
CHANGES
Although most changes are likely to be minor, we may change our privacy policy from time to time. We will notify you of material changes to this privacy policy through the Research Hub website at least 30 days before the changes take effect by posting a notice on our home page or by sending an email if you subscribed to sign up for updates. For changes to this privacy policy that do not affect your rights, we encourage you to check this page frequently.
THIRD PARTY SITES
Some Research Hub pages may link to third-party websites or services that are not maintained by VUMC. VUMC is not responsible for the privacy practices or the content of any such third-party websites or services.
CONTACTING THE RESEARCH HUB TEAM
If you have any questions about this privacy policy, the practices of this site, or your dealings with this site, you can contact us through info@ResearchAllofUs.org.
WARNING NOTICE
You are accessing a website funded by the U.S. Government which may contain information that must be protected under the U.S. Privacy Act or other sensitive information and is intended for government-authorized use only.
Unauthorized attempts to upload information, change information, or use this website may result in disciplinary action and civil and/or criminal penalties. Unauthorized users of this website should have no expectation of privacy regarding any communications or data processed by this website.
Anyone accessing this website expressly consents to monitoring of their actions and all communications or data transiting or stored on related to this website and is advised that if such monitoring reveals possible evidence of criminal activity, VUMC may provide that evidence to law enforcement officials.
DISCLAIMER
Information provided on the Research Hub, including but not limited to text, graphics, images, and other material, is for informational purposes only. The purpose of the Research Hub is to serve as an informational public website for researchers and members of the public to explore static informational pages, aggregateAll of Us data, a data browsing tool, and a full suite of tools for researchers with approved access. The Research Hub is not intended to take the place of any medical advice, laws, regulations, or requirements to participate in the All of Us Research Program.
Some documents on the Research Hub are not Section 508 compliant. We are currently remediating these to comply.
