1. Remote access to confidential data
ITDG 20 octobre 2004
Eurostat - LISO

2. Current situation in Eurostat
Regulation 831/2002 is the basis
Only researchers are concerned
Clearly states that :
confidential data obtained from MS (i.e. raw data) are available only inside the premises of Eurostat
Anonymised microdata sets can be distributed outside Eurostat
ITDG 20 octobre 2004
Eurostat - LISO

3. Anonymised microdata sets
Recorded on cd-rom
Encrypted by the LISO
LISO sends password by mail
No need to set up a remote access
ITDG 20 octobre 2004
Eurostat - LISO

4. Raw data
To grant a remote access will first require a modification to art. 4 of the 831/2002
CEIES recommends nevertheless to study feasibility of a virtual safe-setting
Eurostat has to be ready
ITDG 20 octobre 2004
Eurostat - LISO

5. Existing studies
Joint ECE/Eurostat work session on statistical data confidentiality
Thessaloniki 1999
Skopje 2001
Luxembourg 2003
Conference of european statisticians
Geneva 2003
Paris 2004
ITDG 20 octobre 2004
Eurostat - LISO

6. The 2 types of remote access
CES Paris June 2004
“In reality, there are two types of Remote Access Facilities.
Remote execution where a researcher submits a program and receives the output later by .
(b) Remote facilities where the researcher performs the analysis and can immediately see the answer on the screen.
Many countries have facilities along the lines of (a) but, apart from the Danish system, facilities along the lines of (b) are still under development”.
ITDG 20 octobre 2004
Eurostat - LISO

7. 3 representative experiments
US National Center for Health Statistics
LISSY
Statistics Denmark
ITDG 20 octobre 2004
Eurostat - LISO

8. NCHS ANDRE (Analytic Data Research by email) Since 1998
Dummy data files are given to researchers to ease program development
Program (using SAS) are sent by to NCHS
Validation of user ID and commands
Check of output (automatic + manual if questionable)
Output return by
ITDG 20 octobre 2004
Eurostat - LISO

9. LISSY
Developped in Luxembourg to give remote access to household income survey
Also used by the PIEP project leaded by the London School of Economics
Processing similar to the NCHS
ITDG 20 octobre 2004
Eurostat - LISO

10. Statistics Denmark (1)
Grant access to Danish researchers from their work places that must be of a permanent nature with adequate staffing and equipment
Aimed to replace on site work
Communication via a virtual private network
Raw data does not leave the servers of Statistics Denmark and are stored on dedicated servers
ITDG 20 octobre 2004
Eurostat - LISO

11. Statistics Denmark (2) Use of approved software by researchers
All mails are logged and verified by a special unit
Statistics Denmark has the right to visit and check researchers’ workplaces
Strong and real sanctions in case of violation of the rules
ITDG 20 octobre 2004
Eurostat - LISO

12. Main drawbacks (1)
For program submitted by , checking of the output is very impractical
Time consuming – slow down the work
Finding adequate staff to understand programs and check complex output
Tendency to rely more and more on automatic controls and accept a risk of black hole
ITDG 20 octobre 2004
Eurostat - LISO

13. Main drawbacks (2)
For remote access on line, Statistics Denmark has set up strong organisational and legal restrictions
But the sanctions are efficient only on a national basis : researchers must be danish otherwise the threats would be ineffective
What about researchers from all over Europe ?
ITDG 20 octobre 2004
Eurostat - LISO

14. Future Remote access on line is the path to the future
Eurostat is willing to participate in feasibility studies and tools development that could reinforce remote authentication of users and prevent misuse of the confidential data
These studies are not limited to the technology: imaginative legal solutions at european level should be investigated
ITDG 20 octobre 2004
Eurostat - LISO

15. Questions
ITDG 20 octobre 2004
Eurostat - LISO