Privacy Impact Assessments for Digital Repositories

Trustworthy data repositories ensure the security of their collections. We argue they should also ensure the security of researcher and human subject data. Here we demonstrate the use of a privacy impact assessment (PIA) to evaluate potential privacy risks to researchers using the ICPSR’s Open Badges Research Credential System as a case study. We present our workflow and discuss potential privacy risks and mitigations for those risks. [This paper is a conference pre-print presented at IDCC 2020 after lightweight peer review.]&nbsp

Privacy Impact Assessments for Digital Repositories

This is a preprint of a paper under review at the International Journal of Digital Curation. A shorter version of this paper was presented at the International Digital Curation Conference (IDCC) 2020 in Dublin, and is available here: http://www.ijdc.net/article/view/692Trustworthy data repositories ensure the security of their collections. We argue they should also ensure the privacy of researcher and human subject data. We demonstrate the use of a privacy impact assessment (PIA) to evaluate potential privacy risks to researchers using the ICPSR’sResearcher Passport as a case study. We present our workflow and discuss potential privacy risks and mitigations for those risks.National Science Foundation grant number 1839868http://deepblue.lib.umich.edu/bitstream/2027.42/163509/1/IDCC___IJDC_Open_Badges_paper_FULL_paper.pdfSEL