Close Out Human-Participant Research Files From Home
Map every research copy, transfer through the approved route, verify receipt, and apply the institution's retention or deletion process without involving housemates.
Move human-participant research files out of a shared home through the storage, transfer, and deletion process approved for the study. Do not improvise with personal cloud storage, household drives, email attachments, or a roommate's printer. The protocol, consent language, institution, sponsor, and data-management plan determine what may leave an approved system and what must be retained.
A home closeout is not simply “delete everything.” It is a documented reconciliation between authorized records, temporary working copies, paper, removable media, and backups.
Inventory locations without copying the data
List every place study material may exist: managed laptop, downloads folder, approved remote desktop, local cache, audio recorder, encrypted drive, paper notebook, printer queue, scanner app, email draft, and synced folder. Record the device or location and the responsible researcher, not participant names or file contents.
The NIH Institutional Review Board Office's privacy and confidentiality guidance says human-subjects protocols must explain how participant privacy and data safety will be protected during and after a study. Your IRB-approved protocol and institutional security instructions are the operational rules for this particular project.
Mark each inventory line as authoritative record, permitted working copy, accidental copy, or uncertain. Escalate uncertain items to the principal investigator, research office, data steward, or information-security team. Do not open files merely to satisfy curiosity about what they contain. Metadata, filenames, voices, and free-text notes can identify people even when a direct identifier has been removed.
This inventory is the copy map. Its purpose is to locate risk without reproducing it.
Transfer, verify, then apply the approved disposition
Use only the approved transfer route. That might be a managed sync service, secure repository, institutional VPN, encrypted device handoff, or another method specified by the institution. Keep the device powered and connected until the system confirms transfer. Avoid renaming files in a way that breaks study conventions.
Next, ask the authorized custodian to verify receipt, readability, expected count, and version. A successful upload indicator does not prove that the correct files arrived. Record the verification without placing participant information in the household calendar.
Only then follow the approved retention or deletion procedure for remaining copies. Ordinary trash, emptying a recycle bin, or a factory reset may not meet institutional requirements. A managed device may need to be returned intact so IT can preserve records and sanitize it correctly. Paper may require locked transport and approved confidential destruction rather than a domestic shredder.
If a housemate saw or handled a research page, a device was lost, or data reached an unapproved account, stop the routine closeout and use the institution's incident-reporting route. Do not investigate by forwarding the file to more people. Preserve facts and seek instructions promptly.
HomeCo's article on keeping clinical placement clearance records off shared devices reinforces a useful household rule: access convenience never overrides an institution's approved record boundary.
How HomeCo helps
Create a HomeCo task that says “Research home closeout” with non-sensitive steps such as reserve desk, return managed laptop, and confirm office handoff. Use opaque inventory labels like Device A and Paper Packet B only if those labels cannot reveal participant or study details.
Housemates can keep the workspace undisturbed, avoid using the printer, or accept a sealed equipment-return package if institutional rules allow it. They should not inspect files, witness participant lists, carry unlocked media, or confirm deletion.
Store the copy map, incident details, transfer receipts, and destruction certification only in the approved research system. HomeCo coordinates space and timing. It does not become a shadow research archive.
Frequently asked questions
Can I keep de-identified data on my personal laptop?
Only if the protocol and institution expressly allow that device and storage method. De-identification can be incomplete, and combinations of fields may still create privacy risk.
Should I delete files before returning a university laptop?
Follow IT and study instructions. Deleting first may destroy required records or interfere with managed sanitization. Get the required handoff confirmed in writing.
What if I cannot tell whether a synced folder made another copy?
Pause deletion and ask institutional IT or information security to trace the sync behavior. Guessing can leave an exposed copy or erase the only complete record.