Protecting U.S. Intellectual Investments: A Call to Secure Research Data
Ensuring the security of the United States’ intellectual investments in science and engineering has become crucial in a world increasingly dependent on innovation. Over the last few years, U.S. innovation policy has zeroed in on various aspects of national security, but there’s a looming threat that has garnered less attention: the consolidation of data about American researchers and their work in the hands of a few for-profit publishers, many of which have ties to foreign data brokers. This creates a real and present danger regarding the misuse and sale of sensitive information without the consent or knowledge of the U.S. government.
The Data Acquisition Dilemma
The issue has emerged partly due to a series of acquisitions by major publishing houses of tools used for evaluations, hiring, and promotions within academic institutions. By providing detailed information about researchers’ scientific activities to these publishers, universities inadvertently open the door for this sensitive information to be processed, analyzed, and moved off U.S. soil. The information can then be repackaged and resold, threatening national security and the integrity of American research efforts.
A notable example of this was the 2022 acquisition by the Dutch-based publisher Elsevier of Interfolio, a faculty information tool previously owned by an American firm. More than 400 U.S. academic institutions and over 700,000 researchers utilize Interfolio to manage confidential data regarding hiring, funding, and promotion processes. This tool integrates with university payroll and human resource systems, often without researchers’ consent. The accumulated data not only reflects the unpublished intellectual property and collaborations of thousands of researchers but also details which businesses and federal agencies funded their work, creating a clear picture of the U.S.’s strategic knowledge landscape.
The Unchecked Privacy Policy
One alarming aspect of this situation is the lack of control over how these data repositories are reused and resold. According to Elsevier’s 2023 privacy policy, the data collected on research and researchers may be repurposed and sold by their parent company, RELX, and other related entities. This includes various international locations—Australia, China, the Netherlands, and more—where U.S. laws cannot govern the handling of this sensitive information.
Breaking Down the Solutions
To protect U.S. interests while continuing to foster a robust environment for innovation, a national strategy should be established that balances the scales across three primary areas.
1. Coherent Contract Negotiations
To begin with, universities should operate under a unified framework when negotiating contracts with foreign publishers. A set of essential terms should be developed to guide all contract negotiations at a macro level. Federal support should be established to ensure that these terms are adhered to whenever a vendor is engaged. Importantly, universities should come together as a domestic consortium rather than acting independently, fostering collaboration and ensuring transparency about agreements that govern the use of sensitive data.
2. Data Security Enhancements
Next, the security surrounding the data itself must be tightened. Access should be restricted to individuals within each university who have a legitimate need to view the information. Furthermore, all data should be stored on secure domestic servers, ensuring that personally identifiable information remains confidential. Research data should be protected from being transmitted to locations beyond U.S. jurisdiction, either by utilizing secure university-based centers or Federally certified environments with proper authorizations.
3. Emphasis on Openness and Transparency
Lastly, it’s essential to foster a culture of transparency regarding data usage. Private publishing companies must be held accountable for publicizing their methodologies and analyses applied to research data linked to federal funding. Scientists and university administrators should receive clear, transparent guidelines on how their data is being utilized, along with opt-in/opt-out options for data sharing. Regular audits for compliance with security and privacy standards should become standard practice for all research content managed by private companies.
Investing in U.S.-Based Solutions
Looking toward the future, the U.S. government needs to recognize the significance of these data, not just for academic advancement, but also for national security and international competitiveness. Options must be explored that do not relinquish control to foreign entities. Building a U.S.-based national research infrastructure centered around open-source research reporting tools, regulated by U.S. laws, could pave the way for more cost-effective, transparent solutions.
A Call for Immediate Action
In an environment where research and development continue to grow increasingly complex, it’s vital for the U.S. to have robust tools to manage these advancements securely. The current trajectory poses risks to critical research outputs if the foreign for-profit data broker industry remains unchecked. Urgent action from policymakers and research leaders is needed to foster the next generation of open data management that safeguards U.S. interests while empowering scientists and researchers in their work.
