Lessons learned in training ‘safe users’ of confidential data

Ritchie, Felix; Green, Elizabeth; Newman, John; Parker, Talei

Abstract

Many statistical organisations require researchers using detailed sensitive data to undergo ‘safe researcher’ training. Such training has traditionally reflected the ‘policing’ model of data protection. This mirrors the defensive stance often adopted by data providers, which shifts the responsibility of failure onto the user, and which derives its behavioural assumptions from the neoclassical economic models of crime.
In recent years, there has been recognition that this approach is not well-suited in addressing the two most common risks to confidentiality: mistakes, and avoidance of inconvenient regulation. Moreover, it is hard to exploit the benefits of user engagement under the policing model, which encourages ‘them and us’ thinking. Finally, there is little evidence to suggest that students absorb “do/don’t” messages well.
There is a growing acceptance that a ‘community’ model of data protection brings a range of benefits, and that training is an investment in developing that community. This requires a different approach to training, focusing more on attitudinal shifts and less on right/wrong dichotomies.
This paper summarises recent learning about training users of confidential data: what they can learn, what they don’t learn, and how to extract the full benefit from training for both parties. We also explore how, in the community model, trainers and data owners also need to be trained as well researchers.
The paper focuses on face-to-face training, but also considers lessons for other training environments.
We illustrate with an example of the conceptual design of a new training course being developed for the UK Office for National Statistics.

Citation

Ritchie, F., Green, E., Newman, J., & Parker, T. (2017, September). Lessons learned in training ‘safe users’ of confidential data. Paper presented at UNECE/Eurostat work session on statistical data confidentiality - 2017, Skopje, FYR Macedonia

• Presentation Conference Type: Conference Paper (unpublished)
• Conference Name: UNECE/Eurostat work session on statistical data confidentiality - 2017
• Start Date: Sep 20, 2017
• End Date: Sep 22, 2017
• Acceptance Date: Jul 19, 2017
• Publication Date: Oct 19, 2017
• Peer Reviewed: Not Peer Reviewed
• Keywords: confidentiality, data management, safe people, training
• Publisher URL: https://statswiki.unece.org/display/SDC2017/Work+Session+on+Statistical+Data+Confidentiality+2017
• Additional Information: Additional Information : This paper was developed through extensive discussion with trainers and participants on training courses in the UK, Australia and Europe. All opinions expressed in the paper are those of the authors and do not represent the views of any organisation.; Title of Conference or Conference Proceedings : Worksession on statistical data confidentiality 2017