Define the release decision
An encrypted letter archive will not open and several similarly named files exist. Repeated password guesses risk delay and confusion before a submission deadline.
Identify the exact archive, current software environment and authorized recovery path before modifying the only letter copy.
Run the control sequence
- 01Stop repeated guessing and preserve the original file and media.
- 02Confirm archive identifier, path, size, date and software version against the manifest.
- 03Test on a copy in the documented supported environment.
- 04Distinguish wrong file, incomplete transfer, version incompatibility, damaged media and missing credential.
- 05Use the separately controlled recovery path and record every attempt and outcome.
Preserve enough evidence
Record the dataset identifier, application cycle, source device or system, export date, manifest, responsible custodian, authorized recommenders, key location, encryption environment, recovery result, retention rule and next review date. Do not put passwords, recovery secrets or unnecessary applicant values in the decision record.
Keep the manifest, custodian, approved recipient, key-separation decision, restore result and retention owner together without copying applicant values into the record.
Keep surrounding controls visible
Password reset may protect future access but cannot be assumed to decrypt an existing letter archive.
Field conditions can create extra copies on tablets, laptops, removable media, synchronization folders and recipient devices. The archive owner must address those copies separately and verify the current software release before relying on product behavior.
Questions to ask
Should the access credential travel with the dataset?
Only when the approved research purpose requires linkage and the responsible owner has authorized the same recipient. Separation is a core risk control.
Does encryption make an export anonymous?
No. Encryption restricts file access; it does not remove identifiers or eliminate reidentification risk after decryption.
Primary references
References support specific controls and do not imply endorsement.