Privacy and security are fundamental concepts that must be built into BBMRI-ERIC IT services by design, as trust and transparency are the key element of each medical research infrastructure. This document focuses on providing a comprehensive list of requirements for implementing IT services of BBMRI-ERIC as well as for interacting with other infrastructures which will provide services to BBMRI-ERIC. It also provides risk analysis of the most important services and pays particular attention to authentication and authorization, as these are supposed to be built jointly with other infrastructures. Last but not least, it summarizes cloud-based architecture for processing of privacy-sensitive data related to biobanking and architecture for their secure storage. This document is written by the BBMRI Competence Centre of the EGI-ENGAGE project, building upon internal document of BBMRI-ERIC on “Security and Privacy Requirements”.

Delivered as Milestone M6.2 document of EGI-Engage.