(process_data_ingress)=

# Data ingress

## Purpose

Data must be brought into the Turing TRE in order to carry out research.
Some projects may also require other artifacts, such as code.
The purpose of this document is to define the security procedures around data ingress.

## Scope

This procedure covers all data and code ingress for all projects running in the Turing TRE.

## Responsibilities

:::{table}
:widths: auto
:class: responsibilities

| Role | Responsibility |
| ---- | -------------- |
| {ref}`role_project_team` | Confirming that data ingress has been successfully completed |
| {ref}`role_project_data_manager` | Making data ingress request |
| {ref}`role_trusted_research_data_manager` | Assessing whether requested artifacts are appropriate for ingress |
| {ref}`role_trusted_research_sysadmin` | Assisting external data providers in uploading data to the TRE |

:::

## Procedure

1. **Complete data ingress form**
    - **Responsible:** {ref}`role_project_data_manager`
    - Fill out a **Turing TRE Data Ingress Request** form using the template in the **{menuselection}`data_ingress`** folder
    - Follow the {ref}`guidance here <complete_data_ingress_form>`
    - Note that several methods of bringing data into the TRE are possible, discuss which is most appropriate with the data provider:
       - {ref}`perform_data_ingress_ase` (**preferred**)
       - {ref}`perform_data_ingress_azcopy`
       - {ref}`perform_data_ingress_sftp`
       - {ref}`perform_data_ingress_other`

2. **Adding a record to the ROPA**
    - **Responsible:** {ref}`role_trusted_research_data_manager`
    - If the project will work with or generate personal data it must be added to the Turing Record of Processing Activities (ROPA).
    - Work with the Data Protection team to ensure this is recorded correctly.

3. **Review ingress request**
   - **Responsible:** {ref}`role_trusted_research_data_manager`
   - Review the `Turing TRE Data Ingress Request` form and any supporting documents.
   - If any changes are needed, discuss these with the {ref}`role_project_team` and amend the form accordingly.

4. **Approve data ingress**
   - {ref}`role_project_data_manager`
   - Send the form to be DocuSigned by each of the appropriate responsible people named on the [project initiation form](complete_project_initiation_form)
   - Place the signed form in the **{menuselection}`data-ingress --> signed`** folder in Sharepoint

5. **Carry out data ingress**
   - {ref}`role_trusted_research_sysadmin`: Work with the data provider and help them carry out the data ingress

6. **Validate data ingress**
   - {ref}`role_project_team`: Validate that the ingressed data is complete and correct.