15. In order to ensure data quality and to prevent any sensitive data from being exposed through HDX, OCHA reviews all datasets that are shared publicly on the platform. This review consists of:

a. An automated scan for sensitive data using Google’s Data Loss Prevention (DLP) tool, to flag and prioritize data for manual review by OCHA.

b. A manual review by an HDX team member based on a quality assurance checklist, which includes the completeness of metadata, the relevance of the data to humanitarian action, the integrity of the data resources, and the absence of any sensitive data, among other criteria.

OCHA reserves the right to conduct a manual review of datasets shared privately on HDX to verify the private datasets comply with these Terms.

 

16. If the manual review under 15(b) shows that a resource contains microdata, personal data, or non-personal sensitive data, the resource is placed ‘under review’. While a resource is  ‘under review’, users are only able to view the dataset page including metadata provided by the contributor, and are not able to download the resource. If a resource has been ‘under review’ for more than one month with no response from the contributor, OCHA will make the resource private. After another month with no response, OCHA will delete the resource.

 

17. For microdata such as household survey results, OCHA runs a disclosure risk assessment to assess the risk of reidentification of individuals. All resources labeled as ‘microdata’ by the contributing organization at the point of upload are automatically placed ‘under review’. The resource will remain ‘under review’ until OCHA determines that the resource can be shared responsibly, either publicly, privately with users that are members of the contributing organization, or on request via HDX Connect. More information about this process is available here

 

18. If a user notices personal or sensitive data shared through the HDX platform they should contact hdx@un.org immediately.