Secure data environments provide a safe and controlled way for approved users to access health data. They keep data protected while supporting research, planning and analysis that benefit the health and well-being of patients and communities across NSW.
A secure data environment (SDE) is a protected virtual space where health data can be stored, accessed, and analysed safely. It uses strong security controls to keep the information private and prevent misuse.
SDEs are also known as trusted research environments (TREs), clean rooms or digital research environments (DREs), and have previously been called secure access environments (SAEs).
SDEs bring data and analysis tools together in one protected location. Approved users complete their work inside the environment, and the granular data stays there. When ready, users can then bring out their results in a summary form via a door (gateway) that is monitored and requires extraction approvals.
A short video from NHS UK explains the concept:
A secure data environment is required when a Five Safes assessment of a request for data held by NSW Health identifies:
NSW Health has established Minimum Requirements for Secure Data Environments. These requirements are technology-agnostic and designed to ensure best-practice data security and governance across five key areas:
To be listed as meeting NSW Health requirements, an SDE provider completes a review that shows how their environment aligns with NSW Health’s minimum standards. This review considers documentation and evidence to confirm that key privacy, security and governance principles are in place
NSW Health is currently in the process of reviewing a number of SDEs to determine whether they meet the NSW Health minimum requirements for an SDE. This page will be updated as soon as any SDE completes the review process and is confirmed to meet the NSW Health minimum requirements.
For now, organisations and researchers should continue using their existing approved environments.
Statistical analysis, machine learning, data visualisation, natural language processing, and other analytical tasks using approved tools.
SDEs enforce governance rules through technical and procedural controls. They, provide comprehensive audit trails, and reduce the risk of unauthorised data sharing.
Contact moh-datagovernance@health.nsw.gov.au for guidance on SDEs, the assessment process or requirements.
Many programs use SDEs to share NSW health data, two current examples of programs that enable projects for public benefit are:
No. The listing shows that the provider met the minimum requirements based on evidence submitted during the review. It is not a certification or endorsement by NSW Health.
NSW Health will review the SDE and may remove them from the list if requirements are not maintained.
Access is available to approved users who meet governance and ethical requirements. Typical users, include researchers, consultants, universities, government agencies, charities/NGOs, and supervised students.
Approved users can choose their own SDEs and discuss with the provider how their requirements are met, and if costs and governance are appropriate. The environment within which data will be stored and analysed must be defined in the approved study protocol. The SDE included can be chosen from the listed SDEs on this page.
Yes. If you are doing research outside your NSW Health role, you need to use SDE that meets NSW Health requirements. This applies even if you work for NSW Health.
No. Individual-level data cannot leave the environment. Only approved, aggregated outputs that have passed disclosure control checks can be exported.
Before accessing SDE, users must complete mandatory privacy and security training. This training covers key areas such as privacy obligations, security protocols, data handling, output review, and incident reporting. Specific requirements may vary by SDE provider, so check with your chosen provider for details.
This varies by SDE provider and depends on the completeness of your application, approvals and training. Contact your chosen provider for their timeline.
Most SDEs provide multiple analytics software. Some may allow bring your own licensed software at their discretion if it doesn't compromise security. Check with your provider.
Projects that are assessed as requiring an SDE, must use an SDE. A data disclosure decision maker can only consider sharing data outside an SDE in a few specific cases. Examples of projects where the ADO may agree that an exception is warranted following a Five Safes assessment, include:
If an SDE is not feasible, meaning there are no available SDEs for data analysis, the requestor must provide supporting information to the relevant data disclosure decision maker for review. The requestor must demonstrate that an SDE cannot be used. They also need to confirm that qualified people such as NSW Health Cyber-Security and Enterprise Architects have reviewed the alternative environment for compliance with NSW Health guidance, policies and legislation.
Check the list of assessed providers on this page. If not listed, the provider must complete the assessment process first.
Yes. SDEs that meet NSW Health requirements support data custodians (or trusted delegates) loading data directly through secure gateways.
Data retention should be determined at the start of the project and documented within the approved study protocol. Retention periods are not fixed for all projects. They depend on multiple factors, including requirements under
Retention may be extended if required by legislation, funding arrangements, or other compliance obligations.
Typically 12+ weeks depending on submission completeness and complexity.
Our requirements are technology-agnostic. Demonstrate how you meet the principles and standards regardless of specific technology choices.
Yes. If your environment changes significantly, notify NSW Health and you may need to submit updated evidence.
Yes. You need to sign an Agreement after a successful review. Then, your SDE can be listed on the NSW Health website.
Input and output checking are controls used in SDEs to manage what data enters and leaves the environment.
Input checking ensures that data loaded into an SDE is approved, appropriate for the project, and transferred safely through a secure gateway.
Output checking ensures that the results leaving the SDE do not contain identifiable or disclosive information. Only approved outputs - such as aggregated tables, statistics or graphs can be released.
Output checking is donesuch as a human reviewer or a designated output checker. They follow documented rules and approvals. Automated tools may support the process, but human review is needed if there is a risk of re-identification.
SDE providers may have different approaches to checking inputs and outputs. However, all reviewed environments must show they have the right checks to protect privacy and lower disclosure risks.
Some of the security standards include ISO 27001, IRAP, eHealth NSW PSAF, ASD Essential Eight, NIST SP 800-37, and other recognised standards. See the requirement document for the complete list.
Break-in testing ensures external threats can't access data. Break-out testing ensures data can't leave unauthorised. Both are critical for SDEs.
Infrastructure and data must be hosted in Australia. Remote access from overseas may be permitted under strict controls. These controls will be documented in the Data Disclosure Agreement between the project lead and NSW Health.
Data must be encrypted at rest and in transit.Use strong encryption such as AES 256-bit minimum manage encryption keys carefully.
SDEs are becoming standard across Australian jurisdictions. Costs vary by provider. They depend on factors such as the number of users, performance requirements, and software needs. Most providers offer flexible pay-for-what-you-use models, so projects only pay for the resources they need.
To manage costs:
Many SDE providers offer volume discounts or negotiated pricing for larger or longer-term projects. Discuss your needs with providers.
Whether you're a researcher, data custodian, or SDE provider, our team is here to support you. Email moh-datagovernance@health.nsw.gov.au.
