Assessment

Data Ethics & Privacy Assessment — Interactive Assessment

Interactive assessment to evaluate projects and datasets for privacy risk, ethical considerations, bias, and regulatory compliance needs. Collects project metadata, guided checklist answers, risk ratings, mitigation actions, and sign-off to support repeatable, auditable reviews.

Interactive Tool

Data Ethics & Privacy Assessment

This assessment helps teams surface privacy, compliance, and ethical risks before analyses or models are built. Complete the fields below for each project or dataset. Saved responses create an auditable record and help prioritize mitigations.

Short name to identify this initiative.
Who is accountable for the project? Include team or role.
Use YYYY-MM-DD or your local date format.
Where the raw data lives (table, bucket, catalog ID).
Describe the analytic or model use case and the business question it answers.
Identify the most sensitive data types present.
What legal basis permits this processing?
Briefly describe how consent or notice is captured and where documentation is stored. If relying on legitimate interest, document the balancing test result.
Estimate the practical risk that individuals could be re-identified from outputs or derivatives.
Select techniques already applied or planned.
Describe parameters, verification tests, or known limitations of the applied methods.
Has the model or analysis been checked for biased inputs, disparate impacts, or proxy variables?
Summarize findings and any subgroup performance differences or mitigations planned.
Is data collection and use limited to what's necessary for the stated purpose?
Is there a documented retention period aligned to the purpose and legal requirements?
Example: 3 years, until project closure, or 'see policy X'.
Select the statement that best describes access and monitoring for this data.
List concrete mitigation steps (technical, contractual, governance), owners, and target dates.
Considering controls and mitigations, how would you rate the residual risk to individuals or the organization?
Current state of the assessment.
Person who reviewed and signed off (privacy officer, data steward, or project owner).
Role or title of the signatory.
Date of sign-off (YYYY-MM-DD).
Add links to impact assessments, privacy notices, policy documents, data catalogs, or test results.
You can explore this tool now. Sign in or create an account to save your responses and return to them later.
Sign In to Save Create an Account
Make this tool part of your work

Save a personal copy, bring it to your team, or tailor the questions and workflow to fit what you are hungry to improve.

Member customization and team collaboration are coming soon.
Discuss Ask the Librarian

Discussion

Comments and conversation will live here.