GDC data is maintained in a secure Data Center at the University of Chicago, Center for Translational Data Science (CTDS). The GDC Data Center meets the NIST SP 800-53 Moderate baseline controls and has the authority to operate with the NCI as a FISMA Moderate Compliant data center. Controls are in place to provide the level of security appropriate for data to be transmitted, processed, or stored in the GDC.
In addition to GDC Data Center security, access to GDC controlled data requires authentication with eRA Commons and authorization to the associated study through the database of Genotypes and Phenotypes (dbGaP) as described at Obtaining Access to Controlled Data. For more information, see the Data Security User's Guide.