Good Data Collaborative: Defining “Responsible Data” for Nonprofits

In Conversations, Events, Past Events, Virtual Roundtables by Digital Impact2 Comments

Listen to Lucy Bernholz, Kelly Church, Natasha Duarte, and Zara Rahman discuss responsible data practice, power, and the role of data and ethics in the tech for social good space.

A recent exploration of responsible data (RD) practice in the nonprofit sector shows a deep disconnect between two opposing visions of data in social change work: one, rights-based and respectful of the individual ownership of data; and the other, data-centric and focused on transactional exchanges of development gains in return for data access and monetization.

Findings suggest that RD is rarely handled effectively, even in organizations that recognize the need to improve their compliance with RD principles. “Responsible data” is also such a new concept that it lacks organizational compliance mechanisms or even broad understanding. Meanwhile, polarized approaches to RD have created inconsistencies across platforms and projects that would make it impossible for data subjects to make informed decisions about who should get their data and how it would be managed.

The consultation that informed this conversation was conducted by the Good Data Collaborative funded by a 2016 Digital Impact Grant, and was a joint project with SIMLab, the CDT, Future of Privacy Forum (FPF) and The Engine Room.

Featured Speakers

    Community Engagement and Technology Consultant
    Policy Analyst at the Center for Democracy & Technology
    Research, Engagement and Communities Team Lead at The Engine Room
    Senior Research Scholar at Stanford PACS and Director of the Digital Civil Society Lab

Moderated by Lucy Bernholz, Director of the Digital Civil Society Lab, the panel included:

  • Kelly Church, Community Engagement and Technology Consultant and current MA student at The Fletcher School;
  • Natasha Duarte, Policy Analyst at the Center for Democracy & Technology (CDT); and
  • Zara Rahman, Research, Engagement and Communities Team Lead at The Engine Room

Watch the full discussion using the media player above, download the transcript (PDF), or listen to the podcast by using the audio player below or by visiting the Digital Impact podcast on iTunes.

A few highlights:

  • We’re in this together: ‘Responsible Data’ is a concept that outlines our collective duty to think about the umbrella of ethical, legal, social, and privacy-related challenges that come from using data in new and different ways in advocacy and social change. Responsible data should be a conversation, and people should openly express their questions, concerns, and things they don’t understand.
  • Systems thinking is required: Responsible Data encompasses a variety of issues which are sometimes thought about separately. Using the Responsible Data framework acknowledge that in order for any of them to be truly addressed, they need to be considered together.
  • The data dichotomy is real: There are many examples of how tech and data are helping to improve lives. There’s also lots of evidence of how it’s doing exactly the opposite in many ways. And sometimes that’s intentional and malicious actors but sometimes it’s also through unintended consequences of well-intended actions. We need Responsible data to help people think through proactively what the unintended consequences of their actions are.
  • Be proactive and intentional: Organizations should develop a plan for collecting data and an end-of-life policy for what they collect, thinking through where it will be kept, how long they will keep it, and who will be responsible for deleting it. Organizations should also limit access to sensitive data and run regular audits to track who is accessing that data, and why.
  • Take a breath: Organizations are collecting and reporting data too quickly. They should instead be clear at the start about what they need versus what is already available. There is very little data minimization happening and organizations are asking additional questions they think could be potentially useful in the future, which often puts beneficiaries or end users at risk.
  • Data have created an ecosystem of actors: Very few organizations do everything with the data they use (collection, handling, and analysis). Consultants, service providers, and donors are all frequently involved. Third party services should be compared for their security promises and guarantees, including encryption and two-factor authentication.
  • Take inventory and respect people’s time: Organizations benefit from policies that prioritize data minimization, and they should limit their data collection to what they need to carry out their missions. Some questions have already been answered; the information may reside elsewhere.
  • Responsible data needs all hands on deck: Practices should be extended beyond upper management to include field staff, volunteers, and interns, who often work with data-vulnerable populations. Everyone, including board members who routinely handle sensitive financial and programmatic data, should follow responsible data practices, attend trainings, and sign written agreements. Finally, responsible data needs to be a first-order priority, and not an afterthought or considered apart from the mission.

Looking for more information? See these speaker-recommended resources:

  • Digital Impact
    • Digital Impact Toolkit
      • Designed to help nonprofit organizations and foundations use digital data ethically, safely, and effectively

Have thoughts or case studies to share on responsible data culture and practice? Chime in below with a comment. Have topics or ideas to suggest for future virtual roundtables? Contact us at

To stay up to date with the latest from Digital Impact, sign up for our newsletter and follow us on Twitter. Better yet, become a contributor. 


  1. I like this weblog so much, saved to fav. “I don’t care what is written about me so long as it isn’t true.” by Dorothy Parker.

Leave a Comment