Exercise: How will you store and safeguard responses?

Managing and storing data raises several key questions that a data governance framework can address. Consider the following thought exercise as you and your team plan ahead.

Imagine you have held the outreach activity (collected questionnaires and surveys, conducted focus groups, or interviewed community members and leaders), and now you will need to manage and store the data. What is the data’s format (hand-written notes, audio files, transcripts or filled-in surveys)? Are there privacy concerns, or was personal data collected? Is it necessary to transfer hand-written or hard-copy notes and surveys to digital formats and storage? If so, can these be safely stored on the local authorities’ computer systems? Will they need to be shared between departments for analysis? What will the protocols to access this information be (i.e., who will have access to view, edit or download these files)? 

In the long term, what will happen to the raw data? Will you retain the original forms (or copies of them), or simply retain the analysis and anonymized compilation of responses (and destroy the original forms or raw data)? 

In responding to these questions, you should be aware of your obligations under the law, your team’s capacities and infrastructure, and the expectations of residents (i.e., what would be the consequences if this raw data was made public?).

Box. Additional resources on data governance and privacy

MetroLab Network, Model Data Governance Policy And Practice Guide For Cities and Counties Link

  • This model offers guidance, defines terms and establishes priorities for cities aiming to develop their own data governance policies. 

Government of Baltimore City, Maryland (U.S.), Data Governance Charter (2021) Link.

  • This is an example of a data governance framework from the Baltimore, Maryland, U.S.

Data Governance and Policy in Africa (Bitange Ndemo et al.) Link

  • This book draws on research by experts across the African continent to establish a foundation for a continental data governance framework. The issues covered include data collection and accuracy, the regulatory regimes for data across countries in Africa, and various challenges and opportunities.

OECD, Smart City Data Governance Link

  • This includes a review of experiences from smart cities (which handle increasingly large amounts of data) and aims to guide policymakers at all levels on setting up effective data governance for smart cities. 

US Government, Data management & governance resources Link

  • This site links to many playbooks, guidance, templates and other resources to support policy implementation and the creation of data governance structures.

The following are international treaties or standards relevant to understanding data privacy and protection. 

  • European Union’s (EU) General Data Protection Regulation (GDPR)
  • Council of Europe’s Convention for the protection of individuals with regard to the processing of personal data (Convention 108+)
  • African Union’s Convention on Cybersecurity and Personal Data Protection
  • Organisation for Economic Co-operation and Development (OECD) offers Guidelines Governing the Protection of Privacy and Transborder Flows of Personal Data
  • Organization of American States (OAS) Updated Principles on Privacy and Personal Data Protection