Merge branch 'filter-daisy-merged' into 'develop'

integrate DAISY labcard

See merge request R3/labCards!9

Former-commit-id: 460e6b6c

external/daisy/R3labCARD-daisy.md

+---
+layout: page
+permalink: /external/daisy/
+
+---
+# <a name="top"></a>DAISY User Guide
+{:.no_toc}
+This LabCard is the user guide for the Data Information System (DAISY). If it is your first time with the guide then start with Section **DAISY at a Glance**.
+
+* TOC
+{:toc}
+
+{% include_relative at_a_glance.md %}
+{% include_relative interface_conventions.md %}
+{% include_relative project_management.md %}
+{% include_relative dataset_management.md %}
+{% include_relative contract_management.md %}
+{% include_relative definitions_management.md %}
+{% include_relative user_management.md %}
+
+
+<!--- Below fragment is needed for TOC in iAWriter PDF export
+
+{{TOC}}
+
+/at_a_glance.md "DAISY at a glance"
+/interface_conventions.md "Interface Conventions"
+/project_management.md "Project Management"
+/dataset_management.md "Dataset Management"
+/contract_management.md "Contract Management"
+/definitions_management.md "Definitions Management"
+/user_management.md "User and Permission Management"
+
++++
+
+-->
+

external/daisy/at_a_glance.md

+
+
+# 1 DAISY at a Glance
+
+DAISY is a tool that assists GDPR compliance by keeping a register of personal data used in research. DAISY's application menu Bar lists the main functions provided.
+
+ ![Alt](./images/menubar.png "DAISY Menubar") 
+ <center>DAISY Menubar</center>
+
+ * _Project Management_ module allows for the recording of research activities as projects. Documenting projects is critical for GDPR compliance as projects constitute the purpose and the context of use of personal data. Any document supporting the legal and ethical basis for data use can be stored in DAISY. Examples are ethics approvals, consent configurations, or subject information sheets.
+ * _Dataset Management_ module allows for the recording of personal data held by the institution. The dataset may or may not fall in the context of a particular project. DAISY allows   Datasets to be defined in a granular way; where - if desired - each data subset, called a data declaration, can be listed individually. These declarations may list data from a particular partner, data of a particular cohort or data of a particular type.  
+ * _Contract Management_ module allows the recording and storage of legal contracts of various types that have been signed with partner institutes or suppliers. Consortium agreements, data sharing agreements, material transfer agreements are examples of contracts. For GDPR compliance contracts become useful when documenting the source of  datasets received or the target datasets transferred. 
+ * _Definitions Management_. DAISY comes pre-packed with default lookup lists; these can be changed during application deployment. Lookup lists are used when defining contracts, projects or datasets. The definitions module of the DAISY application allows the management of dynamic lookup lists, specifically those of cohorts, partner institutes and contact persons.   
+
+The dependencies between DAISY modules is given below. There are no hard dependencies between the Projects, Contracts and Datasets modules. In principle you may start using any of these modules once DAISY is deployed with pre-packed definitions.
+
+![Alt](./images/dependencies.png "DAISY module dependencies")
+ <center>DAISY module dependencies</center>
+ 
+<mark>Our suggestion to first-time users is the following</mark>:
+
+1. Familiarise yourself with DAISY's  interface conventions by reading the [relevant section of this guide](#DIC).
+2. Login to DAISY with a user that has Administrator or VIP privileges. E.g. In the demo deployment the _admin_ user has Administrator privileges and _alice.white_ has VIP privileges.
+3. Use Project Management to [create a project](#PM1). 
+4. Use Dataset Management to [create a dataset](#PM21) within the defined project.
+
+
+
+<br />
+<br />
+<br />
+<div style="text-align: right;"> <a href="#top">Back to top</a> </div>
+<br />
+<br />
+<br />

external/daisy/contract_management.md

+
+<a name="CM"></a>
+# 5 Contract Management 
+
+The Contract Management module allows recording legal documents signed in the context of research activities. Contracts are typically linked to Projects and provide the necessary traceability for the GDPR compliant provision and transfer of data.
+
+<a name="CM1"></a>
+## 5.1 Create New Contract 
+
+<mark>In order  to create a new contract</mark>:
+
+1. Click Contracts from the Menu Bar.<br />
+ ![Alt](./images/contract_menubar.png)
+2. Click the add button from the Contract Search Page.<br />
+ ![Alt](./images/add_button.png)
+3. You will see an empty Contract Form. The _Project_ field is optional, meanwhile, in practice most contracts are signed in the context of a research project. In the _Roles_ field,  you are expected to select one or more GDPR role that identifies your institutions roles as described in the Contract.  In the _Other comments_ section you may describe the nature of the document or if the document has an ID/REF e.g. from a document management system, you may put it in. Just like projects and datasets, when creating contracts you are expected to provide a local responsible in the _Local Custodians_ field. As stated before, one of the Local Custodians must be a user with VIP Privileges. E.g. in the demo deployment _alice.white_ is a  research principle investigator and is a VIP user.<br />
+![Alt](./images/contract_add_form.png)
+4. Click SUBMIT. Once you successfully save the form, you will be taken to the newly created contract's details page, as seen below.<br />
+![Alt](./images/contract_created.png)
+
+<a name="CM2"></a>
+## 5.2 Manage Contract Details 
+
+After initial creation the contract will be in a skeletal form and would need further input on its signatories and document attachments.
+
+### 5.2.1 Manage Contract Partners (Signatories)
+
+Contracts have multiple signatories. These can be  managed via the **Partners (Signatories)** detail box. 
+
+ 
+1. Click the plus button  on the **Partners (Signatories)** details box, as seen below.<br />
+ ![Alt](./images/contract_add_partner.png)
+2. You will see the **Partner and role** addition form. In this form, you will be asked to select the _Partner_ as well as the  GDPR _Roles_ that this partner assumes in the contract. You can select more than one role. It is also mandatory to provide a contact person that is with the selected partner institute. You can either select from the list or you can add a new contact if it does not already exist.  
+![Alt](./images/contract_add_partner_form.png)
+3. Once you fill in the information and click SUBMIT the partner will be added to the list of signatories, as seen below. Partners can be removed from a contract by clicking on the trash icon that will appear when hovering over the items in the **Partner and role detail box**.<br />
+![Alt](./images/project_ref_user_search.png)
+
+### 5.2.2 Manage Contract Documents
+
+You may attach  PDF, word documents, scans, via the **Documents** detail box. Document management is common throughout DAISY modules. It is described [here](#PM25).
+
+
+
+
+<br />
+<br />
+<br />
+<div style="text-align: right;"> <a href="#top">Back to top</a> </div>
+<br />
+<br />
+<br />
\ No newline at end of file

external/daisy/dataset_management.md

+<a name="DM"></a>
+# 4 Dataset Management 
+
+<a name="DM1"></a>
+## 4.1 Create New Dataset 
+In order  to create a new Dataset:
+
+1. Click Datasets from the Menu Bar.<br />
+ ![Alt](./images/dataset_menubar.png)
+2. Click the add button from the Dataset Search Page.<br />
+ ![Alt](./images/add_button.png)
+3. You will see the **Dataset Creation Quick Form**<br />
+ ![Alt](./images/dataset_quick_form.png)
+4. Click SUBMIT. Once you successfully save the form, you will be taken to the newly created dataset's details page, as seen below. <br />
+
+ ![Alt](./images/dataset_details.png)
+ 
+<a name="DM2"></a>
+## 4.2 Declare Data within the Dataset 
+After initial creation the dataset will be in a skeletal form. The dataset needs to be fleshed out with further information on the characteristics of the data it contains. We do this by creating **data declarations** within the dataset, by following these steps. 
+
+ 1. Click the plus button  on the **Data declarations** details box.<br />
+ ![Alt](./images/datadec_empty.png)
+ 
+ 2. You will see the **Data declaration Creation Quick Form** as below. With the **Data declaration Creation Quick Form** you are asked for a **Title**  for the declaration and denote where the data was **Obtained from** by selecting one of three options. For the  **Title** one can use the same title you used earlier when creating the dataset. However, if you're going to have multiple declarations within a dataset you can give them names based on their source or their type (e.g. Helsinki Cohort, Parkinson Study-2, LuxPARK PARK2 Cell lines etc). It is important that the **Title** is a name that is familiar to you and your research group as it will be used in free text search over datasets. The options for the **Obtained from** field is described in detail [in the remainder of this section](#DDEC_OPTIONS). <br />
+![Alt](./images/datadec_quick_form.png)
+
+3. Click SUBMIT. The data declaration will be created you will be taken to the **Data Declaration Editor Page**.
+
+Before we describe the details of data declaration editing we will discuss the three different options for specifying the origin of data in DAISY.
+
+<a name="DDEC_OPTIONS"></a> <mark>The <strong>Obtained from</strong> field captures important information, but, for the first-time users of DAISY it can be difficult to populate. Your choice among the three options will determine if and how your dataset will be linked to other entities in DAISY. If you are a first-time user and you're creating records for learning purposes, we suggest that you choose the option "Other" for simplicity.</mark>
+
+<span>&#9675;  </span><mark><strong>From existing data/samples:</strong></mark> When you state that the data is obtained from existing data/samples in your institution, DAISY will prompt you (as below) to search for and choose the data record which is the origin for your current declaration. 
+
+ ![Alt](./images/datadec_from_existing.png)
+ 
+You will be provided a searchable selection box, through which you can find existing data records by their Project, by responsible PI or by their title. As you will be making a selection from existing records, with this option, it is necessary that origin data had been entered into DAISY earlier. 
+
+
+By choosing the **from existing data/samples:**  you will link the newly created data declaration to an existing data declaration in daisy, as depicted below.
+
+  ![Alt](./images/from_existing_topology.png)
+  
+<span>&#9675;</span><mark><strong>Newly incoming data/samples:</strong></mark> When you select this option, it means you are obtaining data from a collaborator institute or from a repository and this data is being recorded for the first time in DAISY. With this option DAISY will first ask you to select a partner (institutes and repositories are both  in the partner list). Once you select a partner DAISY will then list all those contracts that are in the system involving this partner and that have local custodians overlapping with the custodians of the dataset you're detailing. If there are no such contracts or if none of the existing contracts foresee the receipt of this data, then you have to option to create an empty contract. You can later on provide the details and documentation for this empty contract. It is possible that in some DAISY deployments the _Contract Management_ module, in that case the empty contract acts as a link to the source partner for the data. 
+
+ ![Alt](./images/datadec_newly_incoming.png)
+
+When the  **newly incoming data/samples**  option is chose, DAISY will link the newly created data declaration to a Contract and and associated Partner(s), as depicted below.
+
+
+  ![Alt](./images/newly_incoming_topology.png)
+
+<span>&#9675;</span><mark><strong>Other:</strong></mark> When you select this option, it means you do not want to create  any structured DAISY records to denote the origin of data being declared. DAISY will prompt you to provide a free-text description of the origin of data as seen below.
+
+ ![Alt](./images/datadec_other.png)
+
+Data declared with the **Other** option will not have links to any other records as to its origin.
+
+  ![Alt](./images/other_topology.png)
+
+
+After selecting any one of the options and creating the data declaration, you will be taken back to the Dataset Details Page. You can see the newly added declaration listed in the **Data Declarations** detail box. This box also provides action buttons  for  editing, deleting, and cloning  data declarations, as seen below.
+ 
+ ![Alt](./images/datadec_added.png)
+
+
+Once created you're advised to edit the declaration to provide further information about the data. Data declarations have several fields in addition to the title and origin supplied during their creation.
+
+
+ ![Alt](./images/datadec_edit_1.png)
+ 
+ 
+## 4.3 Manage Dataset Locations
+
+As per GDPR, the storage of personal data is considered as a``data  processing'' and needs tone recorded. The **Storage Locations detail box** allows you to do this. In order to record a new storage location:
+1.  click the plus button  on the **Storage Locations** detail box depicted below. <br />
+
+ ![Alt](./images/dataset_add_location.png)
+ 
+2. You will see the location creation form asking you for the _Storage Backend_ and the  _Nature of data copy_ the _Stored datatypes_ (optional) and _Location of the data_ for the paper. The backends box will list storage platforms for your institution, you need to select one and in the location box you're expected to provide information on where the data can be found on the selected platform. Please note that you are not expected to document individual files. E.g. it is good practice to record the top level folder in which a certain dataset exists. The datatypes are optional and if you're not separately storing data subsets by type then there is no need to specify datatype information for a location. 
+
+ ![Alt](./images/dataset_add_location_form.png)
+ 
+ 
+3. Click SUBMIT and the new location will be listed as below. Storage locations can be deleted by clicking on the trash icon that will appear when hovering over items in the **Storage Locations detail box**. <br />
+ 
+
+   ![Alt](./images/dataset_remove_location.png)
+ 
+## 4.4 Manage Dataset Accesses
+
+As per GDPR, any access to personal data held in an institution needs to be recorded. The **Accesses detail box** allows you to do this. **IMPORTANT NOTE: Before recording access, make sure you have recorded storage locations of data.**
+
+In order to add a new access record:
+
+1.  Click the plus button  on the **Accesses** detail box depicted below.<br />
+ ![Alt](./images/dataset_add_access.png)
+2. You will see the access creation form. Access is defined over a specific storage location, so you'd need to select one  from the _Data Locations_ list. In addition you'd need to document the access control policy in the _Remarks_ section.  If access is time-limited you may specify the start and end dates for its validity. By default all accesses recorded will fall under the scope of the project, which owns the  dataset. It is also possible to record accesses, in the scope of other projects, to do so you must select one from the _Project_ list. We discuss access across projects later in this section.<br />
+ ![Alt](./images/dataset_add_access_form.png)
+3. Click SUBMIT and the new access will be recorded and listed on the dataset's page as below. Accesses can be deleted by clicking on the trash icon that will appear when hovering over items in the **Accesses detail box**. <br />
+   ![Alt](./images/dataset_remove_access.png)
+   
+   
+As discussed above, when data of one project is being access in the context of another project, this can be specified by in the access creation form by selecting a Project (see below left). When you create access records in this way, the dataset will be linked to the project accessing it. This dataset will be listed in the **Dat used from other projects** detail box (see below right).
+   ![Alt](./images/dataset_access_other_project.png)
+ 
+ 
+   
+
+<br />
+<br />
+<br />
+<div style="text-align: right;"> <a href="#top">Back to top</a> </div>
+<br />
+<br />
+<br />
+
+
+

external/daisy/definitions_management.md

+<a name="DEF_M"></a>
+# 6 Definitions Management 
+
+With the _Definitions_ module, DAISY allows the management of _Contacts, _Cohorts_ and _Partners_. All pages within _Definitions_ operate according to the interface conventions given in the [relevant section of this guide](#DIC). In the following sections we only discuss what information is held in these definitions. 
+
+
+<a name="COH_M"></a> 
+## 6.1 Cohorts Management 
+Cohort is a study that collects data and/or bio-samples from a group of participants (e.g. longitudinal case-control or family studies). A cohort is linked to the creation of data and is considered its ultimate source.
+
+In order to effectively handle data subjects' requests, as per GDPR, it is crucial that an institution keeps track of what data it keeps from which cohorts. Inline with this, DAISY allows maintaining a list of _Cohorts_ and link  _Datasets_ to _Cohorts_. 
+
+The information kept on cohorts can be seen in the associated _Editor Page_ seen below. Cohorts are expected to have a _Title_ unique to them, and they are  linked to one or more _Cohort Owners_, which are that are Principle Investigators, Clinicians running the study. Cohorts owners are kept as _Contacts_ in DAISY. In order to maintain a controlled list of cohorts, the administrator for the DAISY deployment may assign an accession number to the _Cohort_, which would be the unique identifier for this Cohort.  <br />
+![Alt](./images/cohort_edit_form.png)
+
+
+ <a name="PAR_M"></a> 
+## 6.2 Partners Management
+
+A _Partner_ is a research collaborator that is the source and/or recipient of human data. Partners are also legal entities with whom contracts are signed. Clinical entities that run longitudinal cohorts, research institutes, or data hubs are all examples of Partners. 
+In accordance, when maintaining _Dataset_ source info, _Dataset_ transfer info or when creating _Contract_ records, you will be asked to select Partners.
+
+The information kept on partners can be seen in the associated _Editor Page_ seen below. <br />
+![Alt](./images/partner_edit_form.png)
+
+<a name="CONN_M"></a> 
+## 6.3 Contacts Management 
+
+DAISY allows keeping an address book of all contact persons related to the _Projects_, _Datasets_, _Cohorts_ and _Contracts_. 
+
+The information kept on contacts is pretty standard as can be seen in the associated _Editor Page_ given below. <br />
+![Alt](./images/contact_edit_form.png)
+
+
+
+<br />
+<br />
+<br />
+<div style="text-align: right;"> <a href="#top">Back to top</a> </div>
+<br />
+<br />
+<br />
\ No newline at end of file

external/daisy/images/.gitattributes

+*.{png,mp4} filter=lfs diff=lfs merge=lfs -text
\ No newline at end of file