there is a second release model - that of Research Data Scotland - where data (which has been depersonalised but which contains enough granularity to be repersonalised with other data) is made available in a sandbox to researchers and their output has to be approved by the sandboxers before release