Trusted Research Environment (TRE) safe settings for sensitive data

Discover what Trusted Research Environments (TREs) are, and why we need them now more than ever

Doctor and patient in consulting room

Sensitive data can unlock powerful insights that improve care, drive innovation, and enable research. But because this data is confidential, it must be handled with care and respect for individual privacy. At the Health Informatics Centre (HIC), we make this possible. We run a Trusted Research Environment (TRE) – a secure, controlled platform where approved researchers can safely access de-identified health and care data for public benefit.

We do not own or sell data. We act on behalf of data controllers (such as NHS Tayside) to manage the data entrusted to us. We are a not-for-profit organisation, operating on a cost-recovery basis. HIC is a data ecosystem made up of experts in data engineering and linkage, software development, research, and information governance. Together, we create the tools and processes that allow research to happen safely. 

We are a data ecosystem; a thriving environment of people with expertise across data linkage and engineering, data science research, software development, infrastructure, and information governance. 

As stated in the Goldacre review:​

“Raw data does not do great work on its own. The data must be curated, managed, cleaned, reshaped and prepared by people. Then it must be made available in well designed platforms, which earn public trust through security and transparency, and which facilitate sharing and re-use of prior work.”

Goldacre Review

This is exactly what we do at HIC. Our TRE is the safe setting, but it is our people, principles, and processes that make it effective and trustworthy.

What is a Trusted Research Environment?

At HIC, we are a Safe Haven – a trusted organisation that helps researchers use sensitive data securely and responsibly. HIC are a data ecosystem and part of this is the tools and technology we use. One of the key tools we use is a Trusted Research Environment (TRE). A TRE is a safe setting where approved users can analyse sensitive data without compromising privacy or security. This means:

  • The data is de-identified (no direct identifiers such as names)
  • Only approved users can access it
  • Activity is monitored and restricted

You might also hear TREs referred to as Secure Data Environments (SDE), particularly in England. These are similar safe settings designed to enable research under strict safeguards. To protect privacy, our TRE has several important features:

  • No internet access
  • Copying, pasting or taking screenshots is blocked
  • All data in or out of the TRE undergoes checking processes
  • Is ISO 27001 accredited – the international gold standard for information security

These protections help ensure that important research can take place, without putting personal information at risk.

Who uses TREs or safe settings?

As a Safe Haven, HIC only allows access to the TRE to people who have the correct approvals in place. They must complete strict checks related to information governance. Only when we have evidence of the appropriate approvals, are these individuals are considered ‘Safe People’ – trusted researchers who meet the standards to access project data in the TRE. 

Safe People can be:

  • Researchers from universities, hospitals, and healthcare providers
  • Data analysts from commercial companies or third-sector organisations

HIC follows international best practice to ensure data is handled responsibly, securely, and transparently. Our processes are accredited to the ISO 27001 standard, so users, and the public can trust in the safeguards we apply.

Get in touch