Should I use Bianca or Rackham?
Q: I want to analyse my data. How do I know whether I can use Rackham/Crex or if it's considered too "sensitive" and should be placed on Bianca/Castor?
A: The short answer is that no human data should be placed on Rackham/Crex.
The slightly longer answer is that any genetic data that is taken from individuals (i.e. not reference genomes) is sensitive data regardless of how "anonymised" it is. Some biometric data can also be considered impossible to anonymise and thus always sensitive personal data. Read the relevant pages at VR and Integritetsskyddsmyndigheten (formerly DataInspektionen). You must apply for a NAISS SENS project if your research involves sensitive personal data — applications to other resources will be denied.
The security of Rackham is that of any ordinary cluster. It relies on ordinary Linux mechanisms, which should be seen not as security, but rather as tools that enable many people to share a common resource with a minimum of incidents. Compare the function of a simple fence that keeps honest people honest (Rackham) and a brick wall with a security door (Bianca).
Additionally, PI's engaged in work with sensitive personal data must have a Personal data assistant agreement (personuppgiftbiträdesavtal) with the host of the data. For Uppsala University employees, this is not an issue because the host and the owner is the same, but everyone else has the responsibility to ensure that an agreement is in place. Please see the PUBA FAQ page for instructions on how to establish an agreement.
Disclaimer: this page is merely well-intentioned advice. You, as PI for a research project, are responsible for ensuring that your research data is handled in accordance with the law.