U.S. flag

An official website of the United States government

Department of Labor Logo United States Department of Labor
Dot gov

The .gov means it's official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you're on a federal government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

BLS Restricted Data Access
Bureau of Labor Statistics > BLS Restricted Data Access > Home

Virtual Data Enclave (VDE)

BLS offers access to all restricted data through a Virtual Data Enclave (VDE).  The VDE is a virtual desktop that will allow you to access confidential data at an approved location on your institution’s premises. You can access the VDE on your own computer via a secure internet connection that will contain your project folder. Outputs you wish to export, as well as files for import, will be subject to BLS approval before being moved to or from the VDE. Statistical software available for use in the VDE includes Stata, R, RStudio, Stat/Transfer, and Python (Spyder, Jupyter Notebook).

VDE Security Requirements

There are two levels of sensitivity of BLS datasets.

  • Restricted Data – which includes:
    1. National Longitudinal Surveys of Youth 1979 State, County, and MSA Geocode
    2. National Longitudinal Surveys of Youth 1979 Child Young Adult State, County, and MSA Geocode
    3. National Longitudinal Survey of Youth 1997 State, County, and MSA Geocode
  • Highly Restricted Data – which includes:
    1. National Longitudinal Surveys of Youth 1979 Census tract and zip code
    2. National Longitudinal Surveys of Youth 1997 Census tract and zip code
    3. National Longitudinal Survey of Youth 1997 School Surveys

The following requirements apply while using the VDE:

For Both Restricted and Highly Restricted Data:

  • All access must take place on institution premises located in the United States. Dorms or residences are not permitted.
  • The VDE must be accessed from a single non-private static IP address that is associated with the institution and restricted to the precise approved room so access can be tracked.
  • If the institution is unable to provide a location-specific IP address restricted to a single room, a static IP address is still required and the VDE must be accessed from a non-portable desktop computer located in the approved room.

For Restricted Data Only:

  • Allowable workspaces include personal offices and library carrels with doors.
  • Cubicles or computer lab space may be permitted only if steps can be taken to prevent unauthorized individuals from seeing or accessing the data. These steps may include screen protectors, workspace dividers, or working from a corner of a room with no ability for others to walk behind the researcher.

For Highly Restricted Data Only:

  • Work must be performed in a locked room that is only accessible to designated agents while BLS restricted data are accessed. The institution must maintain a log of individuals accessing the room. Examples of acceptable arrangements include:

    1. A dedicated room that is only accessible to the agents on the project. This room would need an electronic lock that records badge entry.

    2. A room that may be used by other people when you are not accessing the VDE. This room would need an electronic lock that records both badged entry and exit so we can ensure that no unauthorized individuals were in the room with you.

    3. A library carrel with a locked door that has one key. A librarian keeps the key and anyone using the carrel signs the key in and out and maintains the access log.

Last Modified Date: July 1, 2025