This policy sets out the duties of the University and individual researchers conducting research connected to terrorism, extremism and radicalisation on behalf of The Open University, involving the collection, recording, possession, viewing on the internet, distribution, etc of security-sensitive research materials (see note 1). This includes external and internally-funded research, research by staff, consultants and postgraduate research students, research carried out in collaboration with other organisations and research by visiting academics, honorary associates and emeritus professors.
This document applies to:
Staff conducting research, staff managing those who conduct research, postgraduate research students and their supervisors are therefore required to understand and comply with this policy
This document does not apply to:
As a Higher Education Institution (HEI), The Open University (OU) conducts a wide range of research. The OU Principles on Academic Freedom state that:
‘all members of the University’s academic community, both students and staff, have freedom within the law to hold and express opinions, question and test established ideas or received wisdom. develop and advance new ideas or innovative proposals, present controversial or unpopular points of view’.
The OU Research Code of Practice sets out the standards that govern the conduct of research at the OU and includes a requirement for researchers to comply with all legal and ethical requirements relating to their research.
However, where research is being conducted on issues relating to security-sensitive, radical or extreme topics, particular care is needed. The Terrorism Act (2006) and the Counter-Terrorism and Security Act (2019) outlaw the dissemination of terrorist publications and the viewing or otherwise accessing via the internet documents or records containing information likely to be useful to a person committing or preparing an act of terrorism, regardless of intent.
It is the duty of individual researchers, and the University, to ensure that research in these areas is legitimate, carried out appropriately, and takes account of the requirement, including that set out in law, to safeguard both the researcher and wider society. This policy sets out the duties of the University and the individual researcher in this area.
You should read through this policy carefully. For specific advice on how this document applies to your own research, please seek advice from your Associate Dean Research, supervisor and/or the Research Integrity team.
It is an offence in UK law to view or otherwise access via the internet documents or records containing information likely to be useful to a person committing or preparing an act of terrorism. There is an allowable defence if the information/material being viewed or downloaded is being used for approved, academic research purposes.
The objectives of this policy are to clearly set out the duties and responsibilities of the University and individual researchers who are conducting or planning to conduct research connected to terrorism (see note 2), extremism (see note 3) and radicalisation on behalf of The Open University, where this requires accessing and/or storing security-sensitive research materials. This includes external and internally-funded research, research carried out in collaboration with other organisations and research by visiting and honorary academics and emeritus professors.
The University has a responsibility to protect researchers working on legitimate and approved academic research in areas of terrorism and extremism that requires access to terrorism, extremism or other security-sensitive research materials, including but not limited those of proscribed organisations. The University has a responsibility to protect its researchers from both the possible radicalising effects of viewing such materials, and from the misinterpretation of intent by law enforcement agencies (which may result in prosecution and/or other sanctions against the researcher).
In order to fulfil these responsibilities, the University needs to be aware of and review all research being carried out that falls into the category of terrorism and/or extremism-related research. The University will maintain a central register of all such research. Where the research will involve accessing and/or storing security sensitive materials, institutional approval must be obtained before any extremism-related research commences.
The University will also provide a secure, centrally managed SharePoint site where security sensitive research material can be stored, and a clear policy on the management of such material.
Researchers have a responsibility to ensure that before commencing any research in the area of terrorism or extremism, the project proposal is subject to review and institutional registration. Where the review identifies that the research will involve accessing and/or storing security sensitive materials, the researcher is responsible for ensuring that institutional approval is obtained before commencing the project. This is to ensure their maximum protection when viewing, accessing (including download and storage) terrorism or extremism-related research materials for legitimate and approved academic research purposes.
Institutional approval must be obtained before commencing the research.
Researchers have a responsibility for ensuring security sensitive research material is kept off personal computers and is instead stored in the secure, centrally managed Open University SharePoint site set up for this purpose. It must be accessed and managed according to the principles set out in this policy.
Researchers should be aware of the personal risks of exposing themselves to extremist or terrorism related materials, for example propaganda, recruitment and/or violent materials, and carefully consider risk mitigation strategies.
All OU staff and postgraduate research students are required to undertake the OU’s counter terrorism (‘Prevent’) training (internal link only) every two years. You must ensure you are up to date with this training before commencing any research in the areas of terrorism or extremism.
In order for the University to carry out its duties as required under the counter-terrorism legislation and Prevent Duty, and to ensure its researchers are protected from misinterpretation of intent and/or wrongful prosecution, any research projects connected with terrorism, extremism and/or radicalisation are required to undergo a project review and institutional registration process before the research can commence. Where the review identifies that the research involves accessing and/or storing security sensitive materials, the project is required to undergo an approval process.
Research which involves accessing and/or storing security sensitive materials will be subject to review by the Open University Ethical Research Review Body (ERRB). The research cannot commence until it has been approved by the ERRB. Any changes to the project will require re-approval by the ERRB.
If your research project involves human participants or human data, including online interaction with, or observation of humans, or observations of the traces they leave through social media or other platforms, e.g. Twitter, Facebook etc, then your project additionally requires review by the Human Research Ethics Committee (HREC). HREC review should take place prior to ERRB project registration and approval.
Researchers should be aware that extremist and terrorist-related websites may be under surveillance by law enforcement agencies. Accessing/viewing such (proscribed) websites and/or downloading security-sensitive materials, particularly if they are terrorism or extremism-related, may be illegal and viewed as a prosecutable offence if it is not for approved, academic research purposes (regardless of any actual illegal intent). Registration, review and approval of the research by the University (see the process described in paragraph 4) allows the University to confirm and provide evidence, if required, that the activity is part of legitimate and approved academic research work. Institutional approval must be obtained before commencing the research.
Once approval has been obtained, researchers must use the Open University network to access such material online to ensure that these activities are recognised by law enforcement agencies and other authorities as integral to the approved research project.
Section 58 of the Terrorism Act 2000 made it an offence if a person 'collects or makes a record of information of a kind likely to be useful to a person committing or preparing an act of terrorism'. Sections 2 and 3 of the Terrorism Act 2006 outlaw the dissemination of terrorist publications, including by electronic means. A modification of the Counter-Terrorism and Border Security Act 2019 also introduced the offence of viewing or otherwise accessing via the internet documents or records containing information likely to be useful to a person committing or preparing an act of terrorism. There is, however, a defence if the information is used for approved academic research purposes.
Particular care must therefore be taken to appropriately store security-sensitive research materials and data. Researchers must establish a data management plan that accords with the principles set out below.
All research materials, including data, files or other digital or electronic items including audio or video material used or produced in the course of terrorism and extremism-related research must be stored in the secure, centrally managed Open University SharePoint site set up for this purpose. Only those with a legitimate reason to access the materials will be given the necessary permissions to the site. Materials (including copies) should not normally be kept in any other location. The materials should not be transmitted or exchanged.
Where it is not possible to store materials on the SharePoint site, for example when working off-line, it is allowable to temporarily store the materials on a University-managed personal computer, University-managed laptop or University encrypted portable storage device. Using an OU-managed computer/laptop, preferably fully-optimised, means that it is encrypted so the data that is stored on it is protected should the device be lost or stolen.
If researchers need to work on their research data and materials away from the OU network using their OU computer/laptop, they should use OU IT-approved remote access protocols to connect to the University’s network. Public Wi-Fi connections should not be used.
Physical materials such as manuals, reports or other hard copy documents should be scanned and uploaded to the SharePoint secure area, and the original hard copy destroyed.
Once your research project has been completed, you must follow OU policy in relation to the archiving and retention or destruction of data and materials. Researchers should contact Information Security for advice on secure data destruction.
For further information, advice and guidance, please contact Information Security.
Sections 2 and 3 of the Terrorism Act 2006 outlaw the dissemination of terrorist publications, including by electronic means.
Sensitive research material and data should not be transmitted or exchanged, rather it should be stored on a centrally managed SharePoint site. Those with legitimate reason to access the materials (internal or external research collaborators) will be given the necessary permissions to the site.
Where a researcher intends to work with external research collaborators, arrangements for data storage, data management and data access should be clearly set out in the collaboration agreement.
The collaboration agreement must be concluded, and institutional approval obtained before the research may commence.
To register your project, complete the Extremism and Terrorism-related Research Project registration form (internal link only) and submit it with any supporting documentation to the Research Integrity team.
Where it is identified the project will involve access to and/or storage of security sensitive materials, the submitted documentation will be considered by the Ethical Research Review Body (ERRB). The research may not commence until it has been approved by the ERRB. Any changes to the project will require re-approval by the ERRB, following reconsideration by the Human Research Ethics Committee, where applicable.
Further information on the University’s approach to the Prevent Duty can be found on the Prevent intranet pages (internal link only).
Questions or comments regarding any aspects of the University’s response to the Prevent Duty, can be addressed to the OU Prevent Co-ordinator.
Genuine concerns relating to the use or misuse of sensitive research material by any member of University staff or postgraduate research students should be raised by contacting the OU Prevent Co-ordinator .
The requirements set out in this policy form part of the OU Research Code of Practice, and breaches of the policy by University staff and visiting academics will be dealt with via the Procedure for the Investigation of Research Misconduct Allegations. Breaches of the Policy by postgraduate research students with be dealt with via the Plagiarism and Research Misconduct Policy (Postgraduate Research Students).
Policies are inclusive of all Open University staff and Open University postgraduate research students, regardless of age, care experience, caring status or dependency, civil status, disability, family status, gender, gender expression, gender identity, gender reassignment, marital status, marriage and civil partnership, membership of the Traveller community, political opinion, pregnancy and maternity, race, religion or belief, sex, sexual orientation, socio-economic background or trades union membership status.
The Open University is committed to creating a diverse and inclusive environment in which everyone feels safe and is treated with dignity and respect. Unlawful discrimination of any kind across The Open University will not be tolerated. Safe Space Reporting is available through an online tool through which staff, students, learners and visitors are encouraged to report incidents of assault, bullying, harassment, hate crime, or sexual harassment. It also provides information about what you can do if these incidents happen to you, or to someone you know, and where you can find support.
The current UK definition of terrorism is given in the Terrorism Act 2006. In summary this defines terrorism as the use or threat of action that endangers or causes serious violence to a person/people; causes serious damage to property; or seriously interferes or disrupts an electronic system. The use or threat must be designed to influence the government or to intimidate the public and is made for the purpose of advancing a political, religious or ideological cause.
The UK Government definition of extremism was revised in 2024.
Extremism is now defined as: ‘the promotion or advancement of an ideology based on violence, hatred or intolerance, that aims to:
Organisations which may be prosecuted under UK law. The UK government website contains a list of currently proscribed organisations. Note that organisations not yet included on this list that have recently started to promote terrorist or extremist agendas may also be prosecuted under this legislation.
Radicalisation refers to the process by which a person comes to support terrorism and forms of extremism leading to terrorism.
Although there is no legal definition of ‘security sensitive’, research material which could be classified as “security-sensitive” may include anything which could be interpreted as promoting, endorsing or planning terrorism, radicalisation, or extremism. It is therefore not possible to provide an exhaustive list or description of what might be considered ‘security-sensitive’ and an element of judgment will be required. However, ‘security-sensitive’ information is likely to include (but not necessarily be limited to) material relating to:
Please refer to the following documentation in conjunction with this document:
For specific guidance on how this document applies to your own research, please seek advice from your Associate Dean Research, supervisor and/or the Research Integrity team within the Research, Enterprise and Scholarship Unit.
If you have any comments about this policy document and how it might be improved, please submit these to Research Integrity team.
If you require this document in a alternative format, please contact the Research Integrity team.
The policy has been updated to:
Version number: 3:0
Approved by: Research Committee
Effective from: 10 July 2024
Date for review: July 2027