Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

GDPR Compliance #343

Closed
GeorgiaHCA opened this issue Jan 13, 2020 · 13 comments · May be fixed by alan-turing-institute/AutisticaCitizenScience#122
Closed

GDPR Compliance #343

GeorgiaHCA opened this issue Jan 13, 2020 · 13 comments · May be fixed by alan-turing-institute/AutisticaCitizenScience#122
Assignees
Labels

Comments

@GeorgiaHCA
Copy link
Collaborator

"As a contributor I want my data to be gathered and processed legally"
"As a researcher or contributor I want to ensure I comply with the law and at minimum meet legal ethical requirements"

@EllenDevereux
Copy link

  • Labels, Turing, Fujitsu, Medium
  • Milestones - Data Management

@GeorgiaHCA
Copy link
Collaborator Author

Break this down into more specific requirements

@fjThomasStanley
Copy link

We need to label this issue as a goal. We need to break this issue up into smaller actionable requirements for the platform.

@fjThomasStanley
Copy link

Fujitsu can look to seek internal consultancy on this issue to advise

@GeorgiaHCA GeorgiaHCA self-assigned this Mar 17, 2020
@GeorgiaHCA
Copy link
Collaborator Author

GeorgiaHCA commented Mar 17, 2020

Some steps in broad brushstrokes

  • Arrange consultation with legal expert
  • Provide and seek necessary information to respond to legislation requirements (much of this will be already worked out to a higher standard than required via. ethics approval)
  • Share findings with team : create documentation and make sure built into the design at every stage

@GeorgiaHCA GeorgiaHCA added the help wanted Extra attention is needed label Mar 17, 2020
@GeorgiaHCA
Copy link
Collaborator Author

This is being worked on with the support of an autistic collaborator, Ekaterina Harrison. Documentation can be found using this link

https://github.com/alan-turing-institute/AutisticaCitizenScience/blob/master/community-recommendations/legal-and-ethical-compliance/GDPR.md

@EllenDevereux EllenDevereux self-assigned this Apr 3, 2020
@EllenDevereux
Copy link

Chris Legg from Fujitsu has been having these conversations with our legal team. I will ask him to write up his findings and I will add as a pull request to the GDPR file.

@EllenDevereux EllenDevereux assigned ghost Apr 7, 2020
@JamesSCTJ
Copy link
Collaborator

One another thing it may be worth taking into account is upcoming Online Harms Legislation https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/793360/Online_Harms_White_Paper.pdf

I don't believe that it is likely that the platform will be in scope of the regulations as there doesn't appear to be sufficient User Generated Content and User Interaction. However it might be worth thinking if there are any implications for the platform, the design process and ensuring best practice for working with vulnerable users is baked in and any administrative/regulatory burdens.
@GeorgiaHCA

@ghost
Copy link

ghost commented Jun 10, 2020

Online Harms Legislation shared with Paul Butcher, Security Consultant Fujitsu

@ghost
Copy link

ghost commented Jun 10, 2020

Also on 21st May Ekaterina details shared with Paul Butcher - Autistica Security Officer to gain further information - contact

@ghost
Copy link

ghost commented Jun 10, 2020

Thanks for pulling the documents together on GDPR Principals & DPO Role.

Paul Butcher is creating a GDPR Assessment / Readiness Workbook to gather information from Autistica.

Ekaterina Harrison is offering pro bono legal support and can work with the Fujitsu team.

@GeorgiaHCA
Copy link
Collaborator Author

Heya @jiraslama - just updating as Ekaterina is a volunteer, also removing email as she may prefer it privately circulated (unless she already gave permission?). Thanks! Georgia

@SaimaButt
Copy link

Hi @jiraslama please can you contact Paul and provide an update.

@GeorgiaHCA GeorgiaHCA transferred this issue from alan-turing-institute/AutisticaCitizenScience Oct 12, 2022
@GeorgiaHCA GeorgiaHCA added this to the Strategy and planning milestone Oct 13, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging a pull request may close this issue.

5 participants