Data Exchange transparency indicators

[olizilla]

It would be useful to collect information on

Access Consent & revocation

Is the user in the loop about the use of their data? Do they need to approve sharing before it happens? Does consent course grained, per agency and ongoing, or is it fine grained and short lived (e.g. need new consent for every access)

Possible values:

• Explicit: User explicitly approves sharing with an new agency for a purpose (e.g. DEPA)
• Delegated: User allows "fiduciaries" to manage consent.
• Implicit: Agency-to-Agency sharing by default. (e.g. X-Road)

Access Audit Log

Is it possible to see who accessed your data and why? Is it at the agency level or the individual requestor level?

Possible values:

• audit log available to data principles (the citizen)
• audit log available to data fiduciaries (the agency)
• audit log available to the data controller (the technical operator)

---

From the DPI measurement paper, both of these help to build trust in the system and contribute specifically to to the transparency & privacy attributes of DPI.

[olizilla]

It might be interesting to capture information on the topology of the data exchange. Knowing where the data is stored and how it flows between nodes would let us group together different classes of data exchange platform and point to more specific question we could ask about each type.

Where data is stored

• centrally: nodes read and write data to shared central database (e.g. NHS SPINE, big shared DB)
• edge: data is kept in the silo it is created, a snapshot is sent to a requestor on demand (e.g. X-Road, ESB)

How data flows

• star: all data flows through a central node (e.g ESB, big DB)
• mesh: data flows point to point from provider to requestor (e.g. X-Road)

It's not immediately obvious which attribute of DPI that would fit under, but it feels useful to track to help us understand the basic forms. It will help us spot where we are not comparing like-for-like systems.