Data Protection Policy
This policy lays out the ways in which stakeholders in data collection activities, data storage, and data use can approach these responsibilities, and represents HOT’s commitment to responsible, ethical practices to protect people from harm. Stakeholders include HOT staff, contractors, and deployed volunteers, and can also include OpenStreetMap mappers or other communities engaging in data collection activities funded by HOT or other donors.
Application and Practical Implementation
Our Data Ethics and Protection Tool is the primary vehicle for the implementation of this policy. All field mapping projects, activations, and remote mapping projects in conflict/high-risk areas supported by HOT or using HOT infrastructure must complete this tool prior to beginning activities (remote mapping projects in peaceful, stable areas do not need to complete this tool). All Senior Managers and Directors within HOT must be familiar with this document, and beaware of the circumstances in which activities, projects, and data must be assessed for potential harm. Project Managers dealing with risky contexts such as conflict zones must also be familiar with it.
Revisions and Versioning
Over time, changes in project scope, area of operations, partner requests, or local circumstances can mean that a Data Ethics & Protection assessment becomes outdated and needs to be revised. An assessment needs to be revised in the following circumstances:
- If there are significant changes in project scope, such as the area of operations covered in data collection and mapping, the types of data collected, or the methodology.
- Additional partner requests for mapping which expand covered actors, affected populations, or data that’s being requested.
- Population movements at a scale large enough to affect community dynamics and risks.
- Outbreak of hostilities, public health emergencies, or other major disruptions
Any questions or comments can be sent to data@hotosm.org.
