Security Example: How do I migrate PHI data out of REDCap?

What would you like to see added?

The following comes from a response to a specific request, and will need rework to fit our documentation formats. Each part could become a macro (or set of macros) and reused in other examples.

Investigators (Project Administrators) have the capability and authority to export data from REDCap in identified or de-identified formats at any time, provided the data remains in an appropriately secure environment.

Data management terms are governed via the approved IRP protocol used to collect the data. An amendment to the protocol may be required to migrate the data to another computing or storage platform.

If you are looking to establish a legal Data Use Agreement between UAB and another institution or corporate entity, please reach out to the Office of Sponsored Programs. They provide information about how to do that here: https://www.uab.edu/research/home/osp-federal-contracts/fc-other/data-use-agreements

Review the repository's documentation formats and existing macro or example patterns first; no file or test is named in the issue. Rework the quoted REDCap guidance into the project's format, covering identified or de-identified exports, protocol amendments, and Data Use Agreements, while preserving the supplied Office of Sponsored Programs link.