Pitt Research
Office of Research Protections

If your research study receives funding from University resources, a grant, or a contract processed through the University's Office of Sponsored Programs, you are required by Pitt's Research Data Management Policy to archive the data in repositories that are owned, controlled, or approved by the University. This is crucial for compliance with funding agency requirements, ensuring research integrity oversight, and aligning with the continuously evolving standards for research security.

It is important to note that when protected health information (PHI) is extracted from clinical records for research purposes by Pitt faculty, the extracted records are categorized as personally identifiable information (PII) and fall under Pitt's Research Data Management Policy.

A data security review is conducted for human subject research protocols submitted through the PittPRO system. It is strongly recommended that the designated repository for Pitt data be University-owned, controlled, or approved wherever possible. Therefore, Pitt investigators are advised to utilize Pitt OneDrive or another University-approved data management system like REDCap for storing Pitt data, unless there is a compelling reason to use an alternative storage location. Storing Pitt data in UPMC OneDrive or departmental drives on the UPMC network is generally not permitted.

This document provides guidance on accessing Pitt OneDrive from the UPMC network.

If you have questions regarding the suitable storage locations for Pitt data, please reach out to the Pitt IT help desk for assistance.

Controlled Unclassified Information, or CUI, is information that the federal government requires you to appropriately safeguard and control from release. CUI is not classified information, but it may be sensitive, proprietary, or otherwise restricted. The federal government is increasingly using this designation, so you should be aware of its significance.

You should carefully review the terms and conditions of a federal award or contract to determine if it contains any CUI requirements. If you are unsure, you can contact the Office of Sponsored Programs (OSP) for assistance. Pitt research projects requiring handling or generation of CUI typically contain publication restrictions and must be approved through an exceptions process through OSP.

University-approved CUI projects are subject to mandatory safeguarding controls that are defined in a technology control plan (TCP) through the Office of Research Security and Trade Compliance (ORSTC). A TCP is a document that outlines the procedures and measures to prevent unauthorized access to, or disclosure of, CUI. As a condition of accepting an award that contains CUI requirements, faculty must agree to save all CUI in a special electronic environment managed through Pitt IT. This environment is designed to meet the federal standards for CUI protection and access. Faculty must also ensure that all personnel involved in the CUI project are properly trained and cleared by ORSTC.

Federal agencies have not applied the CUI rules found in 32 CFR Part 2002 in a consistent manner, which has caused confusion for grantees. The ORSTC manages the CUI program, which is described further on this page. If you have any questions or concerns about CUI, please contact ORSTC at researchsecurity@pitt.edu.

RPAC is authorized under the Radiation Protection Act (Act 1984-147) to assist DEP in drafting rules and regulations and to advise  on implementation of specific portions of the regulations.

Annual Disclosures were due by April 15. If you are required to disclose but have not yet submitted your form, please do so as soon as possible. University employees who have not submitted their disclosure will receive weekly email reminders from MyDisclosures with links to their form.

Supervisor reviews are due by June 15. 

As a general reminder, investigators in University research must disclose their financial interests in research in submisssions through the MyRA, ARO or PittPRO systems. Following are two examples:

• An investigator consults for a company and conducts University research sponsored by that company. The investigator must indicate a financial interest in the sponsored research agreement in MyRA.
• An investigator creates a start-up company and conducts University animal research that will evaluate technology the start-up company has optioned from the University. The investigator must indicate a financial interest in the IACUC protocol.

Training videos for disclosers, supervisors and administrators are available here. Step-by-step instructions on how to complete disclosures, supervisor reviews and access MyDisclosures reports are available here. Guidance regarding disclosure requirements is available here.

If you have questions, please contact the University Conflict of Interest Division at mydisclosures_support@pitt.edu.