Many organizations across the world that manage restricted data have adapted the Five Safes framework (safe data, safe projects, safe people, safe setting, safe output) for their management of restricted and confidential data. While the Five Safes have been well integrated throughout the data life cycle, organizations encounter several challenges with regard to safe data management. In this paper, we review current practices for restricted data management, and discuss challenges and future directions. We focus on data use agreements, disclosure risk review, and training. In the future, organizations managing restricted data may need proactively to take into consideration reducing inequalities in access to scientific data, preventing unethical use of data, and managing various types of data.
Keywords: confidentiality; data governance; training.