Legal & Ethical: Difference between revisions

From ADA Public Wiki
Jump to navigation Jump to search
No edit summary
 
(7 intermediate revisions by 2 users not shown)
Line 1: Line 1:
=Legal & Ethical=
= Legal Standards =


==Legal standards ==
The relevant legal standard in Australia for the creation, curation, preservation, and access of data is The Privacy Act 1988 [63], the principle Australian Government legislation protecting the handling and disclosure of individuals’ personal information. 


The relevant legal standard in Australia for the creation, curation, preservation, and access of data is The Privacy Act 1988, the principle Australian Government legislation protecting the handling and disclose of individuals’ personal information.


Privacy Act: https://www.oaic.gov.au/privacy/privacy-legislation/the-privacy-act
= Management of Disclosure Risk =


===how ADA complies with Privacy Act===
All data are evaluated by an ADA archivist to determine disclosure risks and appropriate actions that should be taken to mitigate that risk. To comply with the Privacy Act, archivists first ensure that no directly identifying information (such as participant names and contact details) are included in the data and will remove any such information from all copies of the data files held and disseminated by the ADA. The archivists will also examine the data for indirect identifying information and evaluate risks of disclosure that might arise from combining that information and/or linking that data with other sensitive information in data or other sources. 


overview of risk assessement and deidentification
There are a range of mitigation actions that archivists can recommend to depositors as detailed in the section covering Deposit and Appraisal [22]. The ADA will typically make these changes to the data on behalf of the depositor. 


===Other procedures that comply with privacy act ===
Risk assessment tools are currently in use and in development at the ADA. See sections Quality Assurance [33] and Workflows [34] for details about these tools and their application in the data deposit and appraisal workflows. 


* Transparent privacy policy
The ADA encourages depositors to consult external guidelines [28] for managing disclosure risk. These resources are intended to provide context to the risk mitigation strategies recommended by the ADA archivist, and as a reference for prospective depositors to assist them in making decisions about deidentifying their data prior to submission or in consultation with the ADA.   


* Secure storage


* Updates, corrections, retractions
= Ethical Standards =


* Overseas disclosure
The depositor is responsible for ensuring that data provided to the ADA has been collected from research participants subject to approved research ethics requirements. The ADA does not explicitly request or require evidence of ethical approval or review prior to deposit and the depositor must determine if their ethical obligations permit sharing of data. 


==Ethical standards ==
ADA’s ethical governance aligns with the FAIR and CARE Principles, ensuring that data sharing supports both openness and Indigenous rights in accordance with Australia’s national ethics codes.


The depositor is responsible for ensuring that data provided to the ADA has been collected from research participants subject to approved research ethics requirements. The ADA does not explicitly request or require evidence of ethical approval or review prior to deposit and the depositor must determine if their ethical obligations permit sharing of data.   
Australian researchers working with human participants and based at organisations that receive National Health and Medical Research Council (NHRMC) public research funding are subject to NHMRC National Statement on the Ethical Conduct of Research [64], and the Australian Code for Responsible Conduct of Research (ACRCR) [65].  For research with Aboriginal and Torres Strait Islander People and Communities, researchers must consult and apply NHMRC’s Ethical Conduct in Research with Aboriginal and Torres Strait Islander Peoples and Communities: Guidelines for Researchers and Stakeholders (2018) and Keeping Research on Track II (2018), and the AIATSIS Code of Ethics for Aboriginal and Torres Strait Islander Research (2020) and A Guide to Applying The AIATSIS Code of Ethics for Aboriginal and Torres Strait Islander Research (2020), produced by the Australian Institute of Aboriginal and Torres Strait Islander Studies (AIATSIS) [75].  ADA acknowledges and supports the CARE Principles outlined in these guidelines [46].  
   


...Link to research ethics guidelines...
ADA has been contributing to various projects working towards Indigenous Data Sovereignty [80], Indigenous Metadata development [79], and an ongoing project managed by Harvard Dataverse Project to integrate Local Contexts [78] tools to support Indigenous Cultural and Intellectual Property and Indigenous Data Sovereignty. See ADA Projects & Collaborations [81].  


Australian researchers working with human participants and based at organisations that receive National Health and Medical Research Council (NHRMC) public research funding are subject to NHMRC National Statement on the Ethical Conduct of Research, and the Australian Code for Responsible Conduct of Research (ACRCR).   
The ADA does occasionally accept deposits from organisations that are not governed by the NHMRC guidelines.  In these instances, the ADA will work with the depositor to understand their consent process and determine appropriate access conditions if the data is deemed suitable for publication. The ADA License Agreement and Terms of Use specify appropriate uses of the data that comply with the original ethics approval. See section on Rights Management [26].   


NHMRC National Statement on the Ethical Conduct of Research: https://www.nhmrc.gov.au/research-policy/ethics/national-statement-ethical-conduct-human-research (accessed 2024-06-18) 
The ADA also complies with ethical norms for data sharing as described in the Five Safes Framework [96]. As described above, procedures for identifying and mitigating disclosure risk are in place to ensure data is sufficiently safe for secondary use. The ADA also evaluates requests for data access against the four remaining risk aspects of the framework to ensure that the people making the request, their projects, settings, and outputs are also sufficiently safe.  


Australian Code for the Responsible Conduct of Research: https://www.nhmrc.gov.au/about-us/publications/australian-code-responsible-conduct-research-2018 (accessed 2024-06-18)
=References=


NHMRC National list of ethics committees: https://www.nhmrc.gov.au/sites/default/files/documents/attachments/Committee/HREC-Human-Research-Ethics-Committees-registered-with-NHMRC-LIST.pdf
[33] Quality Assurance – (https://docs.ada.edu.au/index.php/Quality_Assurance)


The ADA does occasionally accept deposits from organisations that are not governed by the NHMRC guidelines. In these instances the ADA will work with the depositor to understand their consent process and determine appropriate access conditions if the data is deemed suitable for publication.  
[34] Workflows – (https://docs.ada.edu.au/index.php/Workflows)


The ADA License Agreement and Terms of Use specify appropriate uses of the data that comply with the original ethics approval. The standard license agreement states that, ‘The material is not to be used for any non-statistical purposes, or for commercial or financial gain without the express written permission of the Australian Data Archive National Manager’.  
[26] Rights Management – (https://docs.ada.edu.au/index.php/Rights_Management)


==Management of disclosure risk ==
[63] The Privacy Act, 1988 – (https://www.oaic.gov.au/privacy/privacy-legislation/the-privacy-act)


All data are evaluated by an ADA archivist to determine disclosure risks and appropriate actions that should be taken to mitigate that risk. To comply with the Privacy Act, archivists first ensure that no directly identifying information (such as participant names and contact details) are included in the data and will remove any such information from all copies of the data files held and disseminated by the ADA. The archivists will also examine the data for indirect indentifying information and evaluate risks of disclosure that might arise from combining that information and/or linking that data with other sensitive information in data or other sources.  
[28] Legal & Ethical – (https://docs.ada.edu.au/index.php/Legal_%26_Ethical)


===Mitigation strategies===
[64] NHMRC National Statement on the Ethical Conduct of Research – (https://www.nhmrc.gov.au/research-policy/ethics/national-statement-ethical-conduct-human-research)
There are a range of mitigation actions that archivists can recommend to depositors incuding...  


The ADA will typically make these changes to the data on behalf of the depositor.  
[65] Australian Code for Responsible Conduct of Research – (https://www.nhmrc.gov.au/about-us/publications/australian-code-responsible-conduct-research-2018)


====External guidelines====
[22] Deposit Appraisal & Collection Policy - (https://docs.ada.edu.au/index.php/Deposit_Appraisal_%26_Collection_Policy)
* ABS: Data confidentiality guide
https://www.abs.gov.au/about/data-services/data-confidentiality-guide
* OAIC: Deidentification and the Privacy Act
https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/handling-personal-information/de-identification-and-the-privacy-act


====Risk assessment tools at ADA====
[75] AIATSIS Code of Ethics for Aboriginal and Torres Strait Islander Research - (https://aiatsis.gov.au/research/ethical-research/code-ethics)
* one
* two
* three


==Other ethical frameworks==
[46] CARE Principles for Indigenous Data Governance - (https://ardc.edu.au/resource/the-care-principles/)


5-safes
[80] Social Indicators and Data Governance to Support Local Decision Making in the Groote Archipelago - (https://anindilyakwa.com.au/wp-content/uploads/2023/03/Social-Indicators-and-Data-Governance-to-Support-Local-Decision-Making-in-the-Groote-Archipelago.pdf)


FAIR
[79] Indigenous Metadata Bundle Communique - (https://doi.org/10.6084/m9.figshare.24353743.v1)
 
[78] Local Contexts - (https://localcontexts.org/)
 
[81] ADA Projects & Collaborations - (https://docs.ada.edu.au/index.php/ADA_Projects#ADA_Projects_and_Project_Collaborations)
 
[96] 5 Safes - (https://fivesafes.org/)

Latest revision as of 23:54, 3 December 2025

Legal Standards

The relevant legal standard in Australia for the creation, curation, preservation, and access of data is The Privacy Act 1988 [63], the principle Australian Government legislation protecting the handling and disclosure of individuals’ personal information.


Management of Disclosure Risk

All data are evaluated by an ADA archivist to determine disclosure risks and appropriate actions that should be taken to mitigate that risk. To comply with the Privacy Act, archivists first ensure that no directly identifying information (such as participant names and contact details) are included in the data and will remove any such information from all copies of the data files held and disseminated by the ADA. The archivists will also examine the data for indirect identifying information and evaluate risks of disclosure that might arise from combining that information and/or linking that data with other sensitive information in data or other sources.

There are a range of mitigation actions that archivists can recommend to depositors as detailed in the section covering Deposit and Appraisal [22]. The ADA will typically make these changes to the data on behalf of the depositor.

Risk assessment tools are currently in use and in development at the ADA. See sections Quality Assurance [33] and Workflows [34] for details about these tools and their application in the data deposit and appraisal workflows.

The ADA encourages depositors to consult external guidelines [28] for managing disclosure risk. These resources are intended to provide context to the risk mitigation strategies recommended by the ADA archivist, and as a reference for prospective depositors to assist them in making decisions about deidentifying their data prior to submission or in consultation with the ADA.


Ethical Standards

The depositor is responsible for ensuring that data provided to the ADA has been collected from research participants subject to approved research ethics requirements. The ADA does not explicitly request or require evidence of ethical approval or review prior to deposit and the depositor must determine if their ethical obligations permit sharing of data.

ADA’s ethical governance aligns with the FAIR and CARE Principles, ensuring that data sharing supports both openness and Indigenous rights in accordance with Australia’s national ethics codes.

Australian researchers working with human participants and based at organisations that receive National Health and Medical Research Council (NHRMC) public research funding are subject to NHMRC National Statement on the Ethical Conduct of Research [64], and the Australian Code for Responsible Conduct of Research (ACRCR) [65]. For research with Aboriginal and Torres Strait Islander People and Communities, researchers must consult and apply NHMRC’s Ethical Conduct in Research with Aboriginal and Torres Strait Islander Peoples and Communities: Guidelines for Researchers and Stakeholders (2018) and Keeping Research on Track II (2018), and the AIATSIS Code of Ethics for Aboriginal and Torres Strait Islander Research (2020) and A Guide to Applying The AIATSIS Code of Ethics for Aboriginal and Torres Strait Islander Research (2020), produced by the Australian Institute of Aboriginal and Torres Strait Islander Studies (AIATSIS) [75]. ADA acknowledges and supports the CARE Principles outlined in these guidelines [46].


ADA has been contributing to various projects working towards Indigenous Data Sovereignty [80], Indigenous Metadata development [79], and an ongoing project managed by Harvard Dataverse Project to integrate Local Contexts [78] tools to support Indigenous Cultural and Intellectual Property and Indigenous Data Sovereignty. See ADA Projects & Collaborations [81].


The ADA does occasionally accept deposits from organisations that are not governed by the NHMRC guidelines. In these instances, the ADA will work with the depositor to understand their consent process and determine appropriate access conditions if the data is deemed suitable for publication. The ADA License Agreement and Terms of Use specify appropriate uses of the data that comply with the original ethics approval. See section on Rights Management [26].

The ADA also complies with ethical norms for data sharing as described in the Five Safes Framework [96]. As described above, procedures for identifying and mitigating disclosure risk are in place to ensure data is sufficiently safe for secondary use. The ADA also evaluates requests for data access against the four remaining risk aspects of the framework to ensure that the people making the request, their projects, settings, and outputs are also sufficiently safe.

References

[33] Quality Assurance – (https://docs.ada.edu.au/index.php/Quality_Assurance)

[34] Workflows – (https://docs.ada.edu.au/index.php/Workflows)

[26] Rights Management – (https://docs.ada.edu.au/index.php/Rights_Management)

[63] The Privacy Act, 1988 – (https://www.oaic.gov.au/privacy/privacy-legislation/the-privacy-act)

[28] Legal & Ethical – (https://docs.ada.edu.au/index.php/Legal_%26_Ethical)

[64] NHMRC National Statement on the Ethical Conduct of Research – (https://www.nhmrc.gov.au/research-policy/ethics/national-statement-ethical-conduct-human-research)

[65] Australian Code for Responsible Conduct of Research – (https://www.nhmrc.gov.au/about-us/publications/australian-code-responsible-conduct-research-2018)

[22] Deposit Appraisal & Collection Policy - (https://docs.ada.edu.au/index.php/Deposit_Appraisal_%26_Collection_Policy)

[75] AIATSIS Code of Ethics for Aboriginal and Torres Strait Islander Research - (https://aiatsis.gov.au/research/ethical-research/code-ethics)

[46] CARE Principles for Indigenous Data Governance - (https://ardc.edu.au/resource/the-care-principles/)

[80] Social Indicators and Data Governance to Support Local Decision Making in the Groote Archipelago - (https://anindilyakwa.com.au/wp-content/uploads/2023/03/Social-Indicators-and-Data-Governance-to-Support-Local-Decision-Making-in-the-Groote-Archipelago.pdf)

[79] Indigenous Metadata Bundle Communique - (https://doi.org/10.6084/m9.figshare.24353743.v1)

[78] Local Contexts - (https://localcontexts.org/)

[81] ADA Projects & Collaborations - (https://docs.ada.edu.au/index.php/ADA_Projects#ADA_Projects_and_Project_Collaborations)

[96] 5 Safes - (https://fivesafes.org/)