Difference between revisions of "Data Ownership"

Jump to: navigation, search
Line 1: Line 1:
[[Impact Evaluation Team|Research teams]] that acquire original data must also consider '''data ownership''' downstream, through a clear set of rules that they will use to [[Publishing Data|release data]] to other researchers, or to the general public. The team should consider whether they can publish the data in full after removing [[Personally Identifiable Information (PII)|personal identifiers]]. For example, the team must consider whether it would be acceptable for their data to be copied and stored on servers anywhere in the world, whether they would prefer to manage permissions on a case-by-case basis, and whether they expect that data users would cite or credit them. Similarly, the team can require users in turn to release their derivative datasets or publications under similar [[Data License Agreement|licenses]], or offer use without restriction. There are simple license templates (like [https://worldbankgroup.sharepoint.com.mcas.ms/teams/ddh/SiteAssets/SitePages/ddh/DataLicenseAgreementTemplate_v4.pdf?cid=68a54269-bbff-4b47-846d-cab248ad7de1 this one] used by the World Bank) for offering many of these permissions. Moreoever, at the planning stage, the team should make sure that all licensing agreements, [[Primary Data Collection|data collection]] contracts, and [[Informed Consent|informed consent processes]] used to acquire the data specifically deal with possible future uses of the data.
[[Impact Evaluation Team|Research teams]] that acquire original data must also consider '''data ownership''' downstream, through a clear set of rules that they will use to [[Publishing Data|release data]] to other researchers, or to the general public. The team should consider whether they can '''publish''' the data in full after removing [[Personally Identifiable Information (PII)|personal identifiers]]. For example, the team must consider whether it would be acceptable for their data to be copied and stored on servers anywhere in the world, whether they would prefer to manage permissions on a case-by-case basis, and whether they expect that data users would cite or credit them. Similarly, the team can require users in turn to release their derivative datasets or publications under similar [[Data License Agreement|licenses]], or offer use without restriction.  
== Read First ==
== Read First ==
* Before acquiring any data, it is critical to establish '''data ownership'''.
* Before acquiring any data, it is critical to establish '''data ownership'''.
Line 17: Line 17:
* '''Constraints''' on [[Publishing Data|publishing]] sensitive or [[Personally Identifiable Information (PII)|personally identifiable]] data.
* '''Constraints''' on [[Publishing Data|publishing]] sensitive or [[Personally Identifiable Information (PII)|personally identifiable]] data.


== Best Practices ==
The following are some steps that '''research teams''' can take to deal with concerns surrounding '''data ownership'''.
* '''Templates.'''There are simple license templates (like [https://worldbankgroup.sharepoint.com.mcas.ms/teams/ddh/SiteAssets/SitePages/ddh/DataLicenseAgreementTemplate_v4.pdf?cid=68a54269-bbff-4b47-846d-cab248ad7de1 this one] used by the World Bank) for offering many of these permissions.
* '''Future uses.'''At the planning stage, the team should make sure that all licensing agreements, [[Primary Data Collection|data collection]] contracts, and [[Informed Consent|informed consent processes]] used to acquire the data specifically deal with possible future uses of the data - including [[Data Storage|storage]].
* '''Stakeholders.''' The contract for [[Primary Data Collection|data collection]] should include specific terms as to the rights and responsibilities of each stakeholder.
* '''Rights.''' The contract must clearly mention which party owns the data produced, and that the research team maintains full intellectual property rights.
* '''Respondent privacy.''' The contract should also explicitly indicate that the contracted firm is responsible for [[Protecting_Human_Research_Subjects|protecting respondent privacy]].
* '''Research ethics.''' The contract should also ensure compliance with [[Research Ethics|ethical standards]] for social science research, and adhere to the specific terms of agreement with the relevant [[Research_Ethics#Ethics_Approvals|institutional review board (IRB)]] or applicable local authority.
== Related Pages ==
== Related Pages ==
[[Special:WhatLinksHere/Data_Ownership|Click here for pages that link to this topic.]]
[[Special:WhatLinksHere/Data_Ownership|Click here for pages that link to this topic.]]

Revision as of 16:41, 21 June 2021

Research teams that acquire original data must also consider data ownership downstream, through a clear set of rules that they will use to release data to other researchers, or to the general public. The team should consider whether they can publish the data in full after removing personal identifiers. For example, the team must consider whether it would be acceptable for their data to be copied and stored on servers anywhere in the world, whether they would prefer to manage permissions on a case-by-case basis, and whether they expect that data users would cite or credit them. Similarly, the team can require users in turn to release their derivative datasets or publications under similar licenses, or offer use without restriction.

Read First

  • Before acquiring any data, it is critical to establish data ownership.
  • Data ownership can sometimes be challenging to establish, as regulations regarding data and information might vary across research teams, and the various organizations and governments they interact with.
  • The best approach is always to consult with a local partner, and enter into specific legal agreements (like a DLA or NDA) establishing ownership, access, and publication rights.
  • Thinking about data ownership is especially important when dealing with confidential or personally identifiable information.

Overview

In some cases, data is implicitly owned by the people who it is about. In others, it is owned by the people who collected it. In still more, it is highly unclear and there are varying norms. The best approach is always to consult with a local partner, and enter into specific legal agreements establishing ownership, access, and publication rights. This is particularly critical where confidential data is involved – that is, when people are disclosing information to you that you could not obtain simply by observation or through public records.

Data Licensing Agreement (DLA)

Data license agreements (DLA), or data use agreements (DUA) are documents that describe what kind of data is being shared with recipients. A DLA clearly states the purpose and duration of access being provided to the recipient, along with restrictions and security protocols that the recipient of the data must follow. Other contracts, such as a non-disclosure agreement (NDA), may also be used to guarantee confidentiality of sensitive data.

While DLAs can differ in terms of structure and the level of detail depending on the context, they must clearly cover the following aspects:

  • The legal framework within which access to the data will be provided
  • Scope of the study for which requestor needs access to the data
  • Restrictions on what the requestor can do with the data
  • Constraints on publishing sensitive or personally identifiable data.

Best Practices

The following are some steps that research teams can take to deal with concerns surrounding data ownership.

  • Templates.There are simple license templates (like this one used by the World Bank) for offering many of these permissions.
  • Future uses.At the planning stage, the team should make sure that all licensing agreements, data collection contracts, and informed consent processes used to acquire the data specifically deal with possible future uses of the data - including storage.
  • Stakeholders. The contract for data collection should include specific terms as to the rights and responsibilities of each stakeholder.
  • Rights. The contract must clearly mention which party owns the data produced, and that the research team maintains full intellectual property rights.
  • Respondent privacy. The contract should also explicitly indicate that the contracted firm is responsible for protecting respondent privacy.
  • Research ethics. The contract should also ensure compliance with ethical standards for social science research, and adhere to the specific terms of agreement with the relevant institutional review board (IRB) or applicable local authority.

Related Pages

Click here for pages that link to this topic.

Additional Resource