Page Comparison

...

• In case the potentially sensitive data is microdata, the following steps will be taken: 
  1. The DPT member on duty makes the dataset private and creates a ticket in the SDC for Microdata Log (this sheet)
  2. Nafi obtains a copy of the microdata
  3. Nafi notifies the organization and explains the SDC process, through this email template, and offers the organization the opportunity to download their data before it is deleted from the platform
  4. After Nafi and the organization have downloaded a copy, or after 24hrs pass, the data is deleted from HDX
  5. Nafi applies the risk assessment tool which is part of the SDCmicro package developed by the World Bank
  6. Nafi shares back the risk assessment with DPT and Policy
  7. The organization focal point and Nafi reach out to the organization to inform them about the established risk level and suggested next steps
  8. If needed, Nafi applies the SDC tool to the data concerned, and conducts another risk assessment and estimates information loss, results are shared with organization focal point and policy email address
  9. Next steps are decided in a call to do case review and recommendation with organization, focal point, Nafi, and ideally data policy
  10. If the data is re-published on HDX after SDC has been applied, Nafi suggests to the contributor how to flag this in the metadata
  11. Lessons learned are recorded in the SDC for Microdata Log (available here) by Nafi

...