(process_data_egress)=

# Data egress

## Purpose

Research outputs must be brought out of the Turing TRE.
These may include data, code or other artifacts.
The purpose of this document is to define the security procedures around data egress.

## Scope

This procedure covers all data and code egress for all projects running in the Turing TRE.

## Responsibilities

:::{table}
:widths: auto
:class: responsibilities

| Role | Responsibility |
| ---- | -------------- |
| {ref}`role_project_team` | Prepare artifacts for egress |
| {ref}`role_trusted_research_data_manager` | Assessing whether requested artifacts are appropriate for egress |
| {ref}`role_trusted_research_sysadmin` | Assisting project team in moving data out of the TRE to an appropriate location |
| Authorised release contact | Downloading outputs to their own system |

:::

## Procedure

1. {ref}`role_project_team`: Fill out the `Turing TRE Data Egress Request` form and place the requested artifacts in the egress folder inside the TRE.

2. {ref}`role_trusted_research_data_manager`: Review the `Turing TRE Data Egress Request` form and any supporting documents. If any changes are needed, discuss these with the {ref}`role_project_team` and amend the form accordingly.

3. {ref}`role_trusted_research_data_manager`: Send it to be DocuSigned by each of the appropriate responsible people named on the `Turing TRE Project Initialisation` form

4. {ref}`role_trusted_research_data_manager`: Place the signed form in the **{menuselection}`data-egress --> signed`** folder in Sharepoint

5. {ref}`role_trusted_research_sysadmin`: Generate a SAS token following the [DSH System Manager instructions](https://data-safe-haven.readthedocs.io/en/latest/management/data.html#data-egress)

6. {ref}`role_trusted_research_sysadmin`: Send the SAS token to the authorised release contact via {ref}`secure email <send_secure_email>`.

7. {ref}`role_trusted_research_sysadmin`: Work with the authorised release contact to help them download the data using one of the approved methods below:
    - {ref}`perform_data_egress_ase` (**recommended**)