b. 20160405 Presentation Toewards Privacy By Design - Marlon ... - Surf

0 downloads 119 Views 2MB Size Report
Apr 5, 2016 - Legal Research Support Maturity Model. Level 1 ... support. Based on the ANDS RDM Framework: http://ands.o
Towards Privacy By Design Key issues to unlock science. Symposium: Designing and Shaping Open Science Amsterdam, April 5 2016 Marlon Domingus

Key issues 1. Attitude and Trust 2. The Researcher 3. Maturity Models as Time Machines 4. New Roles and Collaborations 5. Context and Framing

Attitude

Trust

Source: https://cybersponse.com/data-breaches-by-the-numbers

The researcher in context Responsible Research and Innovation

Hard Law: Privacy Law, Hard Law: Patent Law, Contracts, … Agreements,

Soft Law: Code of Conduct, Guidelines, ...

...

Corporate Social Responsibility Good Citizenship

The researcher in context: soft law

European Code of Conduct National Code of Conduct

University Policy - Research Integrity - Open Access, RDM

Discipline Specific Code of Conduct

The researcher in context: requirements

European Funding Requirements National Funding Requirements

University Requirements

The researcher (& infrastructure) in context T1: researcher works at University A, co-operates with University B and C

University B, Country A collaboration collaboration

University A, Country A

University C, Country B

The researcher (& infrastructure) in context T2: researcher works at University B, co-operates with University C, D and E T3: …

University B, Country A collaboration

collaboration collaboration

University A, Country A

University C, Country B

The researcher in context Legal and Moral Requirements Research Cycle Responsible Research and Innovation

Corporate Social Responsibility

Good Citizenship

Transparency, Guidelines, Services, Infra, …

Researcher Mobility

Example

Source: https://www.monash.edu/__data/assets/pdf_file/0010/385309/sensitive-decision-tree.pdf 11

12

2020 Hindsight It took some time and effort, but now we have Open Access and Open Science. How did we get here?

Legal Research Support Maturity Model Level 1

Level 2

Level 3

Level 4

Level 5

Initial

Development

Defined

Managed

Optimised

Process is disorganised & ad hoc

Process is under development

Process is standardised, communicated

Process is managed, measured

Focus is on continuous improvement

Institutional policies & procedures

Policies & procedures may be undeveloped, not up to date, and/or inconsistent.

Policies & procedures are Policies & procedures are Policies & procedures accepted as Policies & procedures are developed & harmonised. Basic promulgated & absorbed into part of the culture & subject to subject to review & understanding of the gaps in behaviours. audit. improvement. the policies & guidelines.

Legal Research Support

Legal support services are disorganised, Investment in legal expertise. research contracts and agreements are Legal services identified & legally ad hoc supported, inconsistent and staffed. Responsibilities are poorly publicised. defined. Documentation & awareness programs developed.

Co-operation between legal experts & widespread availability of well documented services. Common knowledge available of all relevant legal research support topics.

Widespread take up of legal services at an early stage in the research project. IPR and Privacy are acknowledged as critical to the institutional mission.

Researcher’s feedback, research project’s lessons learned as well as analysis of awarded grant are used to update & improve legal research support services.

IT infrastructure

IT infrastructure provision is patchy, Funds are invested in disorganised & poorly publicised & technology & skills. not supporting the whole research cycle. Responsibilities are defined. Processes are established, defined & documented. Awareness of the different IT infra needs during the research cycle.

Management shows active support. Facilities are well defined & communicated, standardised & integrated. The main aspects of the research cycle are supported in the IT infra. Key privacy aspects are secured in the IT infra.

Infrastructure facilitates whole research cycle as well as special requests for Research IT infra. Management actively engaged. Documentation kept up to date. Privacy By Design implemented.

Concerted efforts to maintain, update & publicise infrastructure. Metrics & feedback used to optimise services. Research IT staff hired for tailored research support.

Based on the ANDS RDM Framework: http://ands.org.au/guides/capability-maturity

14

example

Source: https://www.aicpa.org/InterestAreas/InformationTechnology/Resources/Privacy/GenerallyAccepte dPrivacyPrinciples/DownloadableDocuments/AICPACICA-Privacy-Maturity-Model-ebook.pdf

15

New roles and collaborations Chief Information Security Officer Data Protection Officer Integrity Officer Ethical Committee …

Context and Framing

Further Information

drs. Marlon Domingus project manager Research Data Management Erasmus University Rotterdam +31 10 4088006 [email protected]