Data responsibility in humanitarian action: data incident management

Key takeaways:
• Humanitarian data incidents are events involving the management of data that have caused harm or have the potential to cause harm to crisis affected populations, organisations, and other individuals or groups.
• Examples of humanitarian data incidents include physical breaches of infrastructure, unauthorised disclosure of data, and the use of ‘anonymised’ beneficiary data for non-humanitarian purposes, among others.
• A data incident has four aspects: a threat source, a threat event, a vulnerability and an adverse impact.
• There are five steps to responding to data incidents: notification, classification, treatment, and closure of the incident, as well as learning.