Data Ownership

Research teams that acquire original data must also consider data ownership downstream, through a clear set of rules that they will use to release data to other researchers, or to the general public. The team should consider whether they can publish the data in full after removing personal identifiers. For example, the team must consider whether it would be acceptable for their data to be copied and stored on servers anywhere in the world, whether they would prefer to manage permissions on a case-by-case basis, and whether they require future users to cite them. A well established way of doing this can be through licenses which provide the conditions for future use.

Read First

• Before acquiring any data, it is critical to establish data ownership.
• Data ownership can sometimes be challenging to establish, as regulations regarding data and information might vary across research teams, and the various organizations and governments they interact with.
• The best approach is always to consult with a local partner, and enter into specific legal agreements (like a DLA or NDA) establishing ownership, access, and publication rights.
• Thinking about data ownership is especially important when dealing with confidential or personally identifiable information.

Overview

In some cases, data is owned by the people who it is about, for example, the GDPR states that customers own the personal information that companies collect from them. In other cases, it is owned by the people who collected it. However, in some cases ownership of data may not be clear.

More specifically, in the context of social science research, if the research team is generating data directly, such as survey data, it is important to clarify up front who owns the data, and who will have access to it. These details need to be shared with respondents when they are offered the opportunity to consent to participate in the study. If the research team is not collecting the data directly – for example, if a government, private company, or research partner is doing the data collection – make sure that you have an explicit agreement about who owns the resulting data.

Data Licensing Agreement (DLA)

Data license agreements (DLA), or data use agreements (DUA) are documents that describe what kind of data is being shared with recipients. A DLA clearly states the purpose and duration of access being provided to the recipient, along with restrictions and security protocols that the recipient of the data must follow. Other contracts, such as a non-disclosure agreement (NDA), may also be used to guarantee confidentiality of sensitive data.

While DLAs can differ in terms of structure and the level of detail depending on the context, they must clearly cover the following aspects:

• The legal framework within which access to the data will be provided
• Scope of the study for which requestor needs access to the data
• Restrictions on what the requestor can do with the data
• Constraints on publishing sensitive or personally identifiable data.

Best Practices

The following are some steps that research teams can take to deal with concerns surrounding data ownership.

• Templates.There are simple license templates (like this one used by the World Bank) for offering many of these permissions.
• Future uses.At the planning stage, the team should make sure that all licensing agreements, data collection contracts, and informed consent processes used to acquire the data specifically deal with possible future uses of the data - including storage.
• Stakeholders. The contract for data collection should include specific terms as to the rights and responsibilities of each stakeholder.
• Rights. The contract must clearly mention which party owns the data produced, and that the research team maintains full intellectual property rights.
• Respondent privacy. The contract should also explicitly indicate that the contracted firm is responsible for protecting respondent privacy.
• Research ethics. The contract should also ensure compliance with ethical standards for social science research, and adhere to the specific terms of agreement with the relevant institutional review board (IRB) or applicable local authority.

Related Pages

Click here for pages that link to this topic.

Additional Resources

• JPAL, Handbook on Using Administrative Data for Research and Evidence-based Policy
• ORI, Data Ownership
• Harvard University, Research Data Ownership Policy