Enrolment session

As soon as your authorization process has begun with the relevant authority, public statistic data or health data, you can register for an “enrolment session”. This mandatory step, consisting of an awareness training and the enrolment of your fingerprints on your access card, allows CASD to grant users access to confidential data.

Awareness training occur every month and last for about two hours.

A session includes:

• A description of the secured remote server
• A demonstration of:
  • The connection
  • The workspace
  • Importing and exporting methods
• Awareness training on security issues
• A description of the legal framework for confidential data, namely legal formalities to be carried out when necessary
• A presentation of confidentiality rules (statistical secrecy, fiscal secrecy…)
• A description of the various types of output control and the thresholds for projects with automatic exports
• A presentation of available data

An access smartcard is issued after two fingerprints have been taken. The card is issued on the CASD premises by appointment, after which a login test is performed. The fingerprint minutiae are securely hosted on CASD servers and encrypted with the security certificate only present on the smartcard held by the User. Only the access card given to the User can decrypt the minutiae. CASD staff do not have access to this biometric data nor the means with which to reconstruct them.

The CASD access card you will receive is strictly individual. You must not, under any circumstances, lend it out or let someone else use it.

An enrolment session is valid for 4 years. If you are authorized to access a new project within these 4 years, you will be able to come directly get your access card, instead of needing to attend the awareness training again. For every new project after the 4 year span, a complete enrolment session will have to be attended.

Note: Users of health data now attend the same enrolment sessions as other users.