I admit, I have to force myself to get excited about data security. The reality is it's a big part of planning, recruiting, conducting, orchestrating, presenting and storing research. I’m finding the more our work is stored online and collected from around the world — particularly with all of the remote work we’ve done in the past 2 years — the more conscious we ALL have to be about securing data for ourselves, our clients/employers and our study participants. And it’s something we have to think about BEFORE we collect and store our first piece of study information!

Because of the nature of our work, user experience researchers collect a wide spectrum of sensitive data. Study sponsors and clients share their trade secrets, in-house research, business plans, KPIs and other confidential information. Study participants often share personally identifiable information (PII), and we’re known to collect behavioral, attitudinal and interaction data and other information. They’re entrusting us to keep it all secure.

New technology brings new data security risks

The way technology has connected the world means many researchers have broadened both our client and our participant bases to include the entire globe. Incredible! On the flip side, that means a single research project could be subject to the data security and privacy laws from several different countries.

The global legal landscape around the collection, processing, storage and deletion of sensitive data has grown dramatically more complex in the last few years. And as public awareness of data breaches increases, organizations and individuals (and the latest laws) call for more transparency and accountability, as well as individual rights to delete data.

What should I be protecting, and how?

As a starting point, the things cybersecurity experts recommend for any user or organization — using (and periodically changing) strong passwords, carefully guarding (and auto-locking) your devices, staying off public wifi networks — apply here. But there are more things to consider as a user researcher, including …

• Understanding and protecting study participants’ personally identifiable information (PII). It’s MUCH more than just protecting contact info!

• The key roles of the Data Controller and Data Processor, and the legal rights of the Data Subject

• The importance of comprehensive data deletion procedures at a study’s conclusion

• Creating and adhering to confidentiality agreements

• Limiting — or eliminating — the duplication of data (particularly challenging when you’re collaborating remotely!)

• Procedures for notifying concerned parties when a potential data breach occurs

• Limiting individual use of the finished work product

Curiosity Tank’s excited to offer some expert guidance!

As you know, we’re believers in constant iteration around here. So, a big change we’re making as we kick off the eighth cohort of the Ask Like A Pro® workshop series this week is to move this important data and security training into the first week. We’ve called in an expert, Curiosity Tank’s own go-to attorney, who is a data security and policy expert for research organizations. He covers the points listed above and more!

Observer and All-In Alumni are invited to watch the first of two sessions he’ll lead in the Alumni Recorded Event directory and join us for the second part of this live training on April 4, from 12:30-1:30 pm PST (NEW DATE AND TIME!). Our attorney reviews the core tenants of confidentiality, data, privacy and security as they relate to Curiosity Tank, both as a business (including the consultancy side) and Ask Like A Pro. Both sessions include a lot of contracts about confidentiality, and data security processes and requirements.

Speak up, get involved, share the love

• Connect with me on LinkedIn for more UXR tips and UX discussions

• Read about Curiosity Tank workshops. The next series begins in late March!

• Participate as an On-Demand, or as an Observer, for less!

• Dive into a different UX Research term every week! Sign up for UX Lex weekly emails here.

• Forward this email to someone who you think might enjoy it. Better yet, sign them up here. It will be the gift that keeps on giving.

And that’s a wrap!

We typically alternate between a theme and UX/UXR jobs, events, classes, articles, and other happenings every few weeks. Thank you for all of the feedback. Feedback is a gift and we continue to receive very actionable input on how to make Fuel Your Curiosity more meaningful to you.

What do you think? Lmk. We're constantly iterating and love to hear your input.

Stay curious,
- Michele and the Curiosity Tank team

PS. It’s not too late to be an Ask Like A Pro Observer for this cohort! Click here to learn more and register!