Legal & Ethical: Difference between revisions

From ADA Public Wiki
Jump to navigation Jump to search
No edit summary
 
(4 intermediate revisions by the same user not shown)
Line 3: Line 3:
==Legal standards ==
==Legal standards ==


The relevant legal standard in Australia for the creation, curation, preservation, and access of data is The Privacy Act 1988, the principle Australian Government legislation protecting the handling and disclose of individuals’ personal information.  
The relevant legal standard in Australia for the creation, curation, preservation, and access of data is The Privacy Act 1988 [63], the principle Australian Government legislation protecting the handling and disclose of individuals’ personal information.


Privacy Act: https://www.oaic.gov.au/privacy/privacy-legislation/the-privacy-act
==Management of Disclosure Risk ==


===how ADA complies with Privacy Act===
All data are evaluated by an ADA archivist to determine disclosure risks and appropriate actions that should be taken to mitigate that risk. To comply with the Privacy Act, archivists first ensure that no directly identifying information (such as participant names and contact details) are included in the data and will remove any such information from all copies of the data files held and disseminated by the ADA. The archivists will also examine the data for indirect identifying information and evaluate risks of disclosure that might arise from combining that information and/or linking that data with other sensitive information in data or other sources.


overview of risk assessement and deidentification
There are a range of mitigation actions that archivists can recommend to depositors as detailed in section R08. The ADA will typically make these changes to the data on behalf of the depositor.


===Other procedures that comply with privacy act ===
Risk assessment tools are currently in use and in development at the ADA. See sections R10 [33] and R11 [34] for details about these tools and their application in the data deposit and appraisal workflows.


* Transparent privacy policy
The ADA encourages depositors to consult external guidelines [28] for managing disclosure risk. These resources are intended to provide context to the risk mitigation strategies recommended by the ADA archivist, and as a reference for prospective depositors to assist them in making decisions about deidentifying their data prior to submission or in consultation with the ADA. 
 
* Secure storage
 
* Updates, corrections, retractions
 
* Overseas disclosure


==Ethical standards ==
==Ethical standards ==
Line 25: Line 19:
The depositor is responsible for ensuring that data provided to the ADA has been collected from research participants subject to approved research ethics requirements. The ADA does not explicitly request or require evidence of ethical approval or review prior to deposit and the depositor must determine if their ethical obligations permit sharing of data.   
The depositor is responsible for ensuring that data provided to the ADA has been collected from research participants subject to approved research ethics requirements. The ADA does not explicitly request or require evidence of ethical approval or review prior to deposit and the depositor must determine if their ethical obligations permit sharing of data.   


...Link to research ethics guidelines...
Australian researchers working with human participants and based at organisations that receive National Health and Medical Research Council (NHRMC) public research funding are subject to NHMRC National Statement on the Ethical Conduct of Research [64], and the Australian Code for Responsible Conduct of Research (ACRCR) [65].   
 
Australian researchers working with human participants and based at organisations that receive National Health and Medical Research Council (NHRMC) public research funding are subject to NHMRC National Statement on the Ethical Conduct of Research, and the Australian Code for Responsible Conduct of Research (ACRCR).   
 
NHMRC National Statement on the Ethical Conduct of Research: https://www.nhmrc.gov.au/research-policy/ethics/national-statement-ethical-conduct-human-research (accessed 2024-06-18) 
 
Australian Code for the Responsible Conduct of Research: https://www.nhmrc.gov.au/about-us/publications/australian-code-responsible-conduct-research-2018 (accessed 2024-06-18)
 
NHMRC National list of ethics committees: https://www.nhmrc.gov.au/sites/default/files/documents/attachments/Committee/HREC-Human-Research-Ethics-Committees-registered-with-NHMRC-LIST.pdf
 
The ADA does occasionally accept deposits from organisations that are not governed by the NHMRC guidelines. In these instances the ADA will work with the depositor to understand their consent process and determine appropriate access conditions if the data is deemed suitable for publication.


The ADA License Agreement and Terms of Use specify appropriate uses of the data that comply with the original ethics approval. The standard license agreement states that, ‘The material is not to be used for any non-statistical purposes, or for commercial or financial gain without the express written permission of the Australian Data Archive National Manager’.  
The ADA does occasionally accept deposits from organisations that are not governed by the NHMRC guidelines. In these instances, the ADA will work with the depositor to understand their consent process and determine appropriate access conditions if the data is deemed suitable for publication. The ADA License Agreement and Terms of Use specify appropriate uses of the data that comply with the original ethics approval. See section R02 [26].  


==Management of disclosure risk ==
The ADA also complies with ethical norms for data sharing as described in the Five Safes Framework. As described above, procedures for identifying and mitigating disclosure risk are in place to ensure data is sufficiently safe for secondary use. The ADA also evaluates requests for data access against the four remaining risk aspects of the framework to ensure that the people making the request, their projects, settings, and outputs are also sufficiently safe. 


All data are evaluated by an ADA archivist to determine disclosure risks and appropriate actions that should be taken to mitigate that risk. To comply with the Privacy Act, archivists first ensure that no directly identifying information (such as participant names and contact details) are included in the data and will remove any such information from all copies of the data files held and disseminated by the ADA. The archivists will also examine the data for indirect indentifying information and evaluate risks of disclosure that might arise from combining that information and/or linking that data with other sensitive information in data or other sources.
==References==


===Mitigation strategies===
[33] Quality Assurance – (https://docs.ada.edu.au/index.php/Quality_Assurance)
There are a range of mitigation actions that archivists can recommend to depositors incuding...  


The ADA will typically make these changes to the data on behalf of the depositor.  
[34] Workflows – (https://docs.ada.edu.au/index.php/Workflows)


====External guidelines====
[26] Rights Management – (https://docs.ada.edu.au/index.php/Rights_Management)
* ABS: Data confidentiality guide
https://www.abs.gov.au/about/data-services/data-confidentiality-guide
* OAIC: Deidentification and the Privacy Act
https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/handling-personal-information/de-identification-and-the-privacy-act
* UniSQ: Ethics, consent and data sharing [pdf]
https://www.unisq.edu.au/-/media/usq/research/research-support/human-ethics/specific-research/ands-ethics-consent-and-data-sharing-guide.ashx?rev=911d3afab0c845c2a27d066a38921902&hash=C948891CF15DE7342092A9511A21B9E9


====Risk assessment tools at ADA====
[63] The Privacy Act, 1988 – (https://www.oaic.gov.au/privacy/privacy-legislation/the-privacy-act)
* one
* two
* three


==Other ethical frameworks==
[28] Legal & Ethical – (https://docs.ada.edu.au/index.php/Legal_%26_Ethical)


5-safes
[64] NHMRC National Statement on the Ethical Conduct of Research – (https://www.nhmrc.gov.au/research-policy/ethics/national-statement-ethical-conduct-human-research)


FAIR
[65] Australian Code for Responsible Conduct of Research – (https://www.nhmrc.gov.au/about-us/publications/australian-code-responsible-conduct-research-2018)

Latest revision as of 04:42, 10 September 2024

Legal & Ethical

Legal standards

The relevant legal standard in Australia for the creation, curation, preservation, and access of data is The Privacy Act 1988 [63], the principle Australian Government legislation protecting the handling and disclose of individuals’ personal information.

Management of Disclosure Risk

All data are evaluated by an ADA archivist to determine disclosure risks and appropriate actions that should be taken to mitigate that risk. To comply with the Privacy Act, archivists first ensure that no directly identifying information (such as participant names and contact details) are included in the data and will remove any such information from all copies of the data files held and disseminated by the ADA. The archivists will also examine the data for indirect identifying information and evaluate risks of disclosure that might arise from combining that information and/or linking that data with other sensitive information in data or other sources.

There are a range of mitigation actions that archivists can recommend to depositors as detailed in section R08. The ADA will typically make these changes to the data on behalf of the depositor.

Risk assessment tools are currently in use and in development at the ADA. See sections R10 [33] and R11 [34] for details about these tools and their application in the data deposit and appraisal workflows.

The ADA encourages depositors to consult external guidelines [28] for managing disclosure risk. These resources are intended to provide context to the risk mitigation strategies recommended by the ADA archivist, and as a reference for prospective depositors to assist them in making decisions about deidentifying their data prior to submission or in consultation with the ADA.

Ethical standards

The depositor is responsible for ensuring that data provided to the ADA has been collected from research participants subject to approved research ethics requirements. The ADA does not explicitly request or require evidence of ethical approval or review prior to deposit and the depositor must determine if their ethical obligations permit sharing of data.

Australian researchers working with human participants and based at organisations that receive National Health and Medical Research Council (NHRMC) public research funding are subject to NHMRC National Statement on the Ethical Conduct of Research [64], and the Australian Code for Responsible Conduct of Research (ACRCR) [65].

The ADA does occasionally accept deposits from organisations that are not governed by the NHMRC guidelines. In these instances, the ADA will work with the depositor to understand their consent process and determine appropriate access conditions if the data is deemed suitable for publication. The ADA License Agreement and Terms of Use specify appropriate uses of the data that comply with the original ethics approval. See section R02 [26].

The ADA also complies with ethical norms for data sharing as described in the Five Safes Framework. As described above, procedures for identifying and mitigating disclosure risk are in place to ensure data is sufficiently safe for secondary use. The ADA also evaluates requests for data access against the four remaining risk aspects of the framework to ensure that the people making the request, their projects, settings, and outputs are also sufficiently safe.

References

[33] Quality Assurance – (https://docs.ada.edu.au/index.php/Quality_Assurance)

[34] Workflows – (https://docs.ada.edu.au/index.php/Workflows)

[26] Rights Management – (https://docs.ada.edu.au/index.php/Rights_Management)

[63] The Privacy Act, 1988 – (https://www.oaic.gov.au/privacy/privacy-legislation/the-privacy-act)

[28] Legal & Ethical – (https://docs.ada.edu.au/index.php/Legal_%26_Ethical)

[64] NHMRC National Statement on the Ethical Conduct of Research – (https://www.nhmrc.gov.au/research-policy/ethics/national-statement-ethical-conduct-human-research)

[65] Australian Code for Responsible Conduct of Research – (https://www.nhmrc.gov.au/about-us/publications/australian-code-responsible-conduct-research-2018)