
Careful data storage for subsequent use prevents researchers from collecting the same data over and over again, protecting participants from inefficient research practices and exposing them to less risk. Especially if participants are unable to give consent to additional uses of their data, all records should be de-identified before use. In this case, you should destroy any identifying information and linking files once you have kept them for the longest applicable standard. If you anticipate this situation, you should state in your consent form that data may be retained for use in future studies.

Sometimes researchers wish to reuse data for subsequent studies. Ideally, you should define your retention policy in your consent form, so that your participants can agree to it. Moreover, some participants may object to retention of their study records for an indefinite amount of time. Of course, practical considerations of storage space may make this impossible.

As long as you can guarantee that your research records are secure, you can keep them indefinitely. Notice that these regulations do not specify when you must destroy data, only state the minimum amount of time you must retain it.

Another good practice is to retain data until there is no reasonable possibility that you will be required to defend against an allegation of scientific misconduct. In sum, you must keep your research records for at least 5 years and possibly longer, depending on the longest applicable standard. Finally, research sponsors may require longer retention periods. Research that involves identifiable health information is subject to HIPAA regulations, which require records to be retained for at least 6 years after a participant has signed an authorization. Additional standards from your discipline may also be applicable to your data storage plan. Federal regulations require research records to be retained for at least 3 years after the completion of the research (45 CFR 46) and UVA regulations require that data are kept for at least 5 years.

What do you do with your data and other research materials once the study has concluded? Different regulations apply to how long you are required to store records after the completion of research, and you must keep records for the longest applicable period of time.
