DAMA New England

DMBoK Chapter 4: Data Handling Ethics

February 16, 2022
Lynn Noel, DAMA New England – VP Membership
Email: membership@damanewengland.org
Hosted by DAMA New England
• A Chapter of DAMA International
• The premier educational & professional networking resource for the
enterprise data management community in New England
• Host educational events, via Webinars and on-site (when permitted)
• Promote learning based on the DMBoK2 knowledge areas
• See our Website: DAMANewEngland.org for more information
• Membership benefits include:
• Free or discounted admission
• Educational and networking events
• Growing base of knowledge items available via Member-only section of the Website
• Peer-to-peer networking and mentoring opportunities

We welcome you to be part of our growing community!

New England Data Management Community

WELCOME OUR PRESENTERS
LYNN E. NOEL
▪ Principal, Digital Heritage Consulting
▪ Certified Data Management Professional (CDMP)
▪ Master data management consultant, Sanofi Pharmaceutical
▪ Executive Certificate in Digital Business Strategy, MIT
▪ M.S. Geography, University of Wisconsin-Madison
▪ Director/mentor for IM & analytics, architecture & modeling
▪ Digital workplace platforms at Big Five IT, midsize, & startup firms

CONTACT INFO:
EMAIL: membership@damanewengland.org
PHONE: +1-978-985-2707
: /IN/lnoel

New England Data Management Community

Principles, Practices & Processes Protecting People’s Personal Privacy

New England Data Management Community

What is the DMBoK definition of ethics?

Right Wrong

New England Data Management Community

Name at least four of the seven example ideas on which
ethical principles are focused.

Fairness

Trust Respect

Transpa- Responsi
rency IDEAS bility

Reliabilit
Integrity
y

Quality

New England Data Management Community

What is the DMBoK definition of data handling ethics?

Procure

Store

ETHICAL
Manage
DATA
PRINCIPLES
Use

Dispose of

New England Data Management Community

What are four reasons that DAMA says that data
handling ethics are important?

Loss of
Long-term
reputation and
success
customers

Unethical
Social
practices may
Responsibility
be illegal

New England Data Management Community

List three core concepts of data handling ethics
from the DMBoK.

Impact on people

Potential for
misuse

Economic value of
data

New England Data Management Community

Which one of these goals is NOT in the DMBoK as a
business driver for data handling ethics?

Monitor Define

Auto
Educate
mate

Culture

New England Data Management Community

Name at least three of the six inputs needed to define
data handling ethics for an organization.
Organiza-
tional
ethics
Business
Existing Strategy
Policies and
Goals
INPUTS
Organiz-
Regula-
ational
tions
Structure
Business
Culture

New England Data Management Community

What are the six core activities of data handling ethics?
1) Review Data Handling
Practices

Data Handling Ethics

2) Identify Principles, Practices,
and Risk Factors

3) Create an Ethical Data Handling

Strategy

4) Address Practice Gaps

5) Communicate and Educate

Staff

6) Monitor and Maintain

Alignment

New England Data Management Community

Name at least five of the nine deliverables that the DMBoK
recommends for a data handling ethics program.

Current Ethical Data

Communication
Practices and Handling
Plan
Gaps Strategy

Ethical Awareness of
Ethics Training
Corporate Ethical Data
Program
Statements Issues

Aligned Ethical Data

Incentives, KPIs, Updated Policies Handling
and Targets Reporting

New England Data Management Community

Name at least three of the six key stakeholders needed to
supply the inputs to an ethical data handling program

Executives

Data
Regulators
Stewards

INPUTS
Executive
Data
Data
Providers
Stewards

IT
Executives

New England Data Management Community

Name at least four of the seven key stakeholders needed to
conduct the activities of an ethical data handling program

Data
Govern-
ance
Data Bodies
Manag-
CDO/CIO
ement
Services

ACTIVITIES
Change
Executives
Managers

Coordi-
Subject
nating
Matter
Data
Experts
Stewards

New England Data Management Community

Name the three key stakeholders recommended
as consumers of an ethical data handling program

Employees

Regulators Executives

New England Data Management Community

List four core techniques and tools used as technical
drivers for a data handling ethics program

Annual
Communi-
Ethics
cation Plan
Statement
Checklists
Affirmation

Microblogsi Wikis,
internal knowledge
communi- bases,
cations intranet
tools sites

New England Data Management Community

List three key metrics of a successful ethical data
handling program

Exec
involvement

Compliance
incidents

# employees
trained

New England Data Management Community

What are two assumptions that lead organizations to fail at data ethics,
and two trends that make it important to succeed?

Organizations are
using data in new
ways and
legislation cannot
keep up with
evolving
environment

Technicians
profess not to
understand the
data and assume
following the
letter of the law =
no risk

New England Data Management Community

What are five key business drivers (3 opportunities
and 2 threats) that motivate a data ethics program?
Increase
trustworthiness
3 Improve relationships
Stakeholders expect
ethical behavior

Reduce
2 organizational risk
Secure data from
criminals

New England Data Management Community

List the six groups of essential concepts for data
ethics in the DMBoK.

Ethical Principles for Data

Principles Behind Data Privacy Law

Online Data in an Ethical Context

Risks of Unethical Data Handling Practices

Establishing an Ethical Data Culture

Data Ethics and Governance

New England Data Management Community

What is entailed in creating an ethical culture for
data handling?

Ethical
Governance Controls
Outcomes

New England Data Management Community

How does data ownership influence data handling
ethics?

Ethics of
Sharing
Ease of Others’
Data Data
Sharing
Improved
Technology

New England Data Management Community

Name five emerging roles with responsibilities for
data handling ethics

Chief
Chief Risk
Privacy
Officer
Officer

Chief
Chief Data
Analytics
Officer
All Officer
Employees

New England Data Management Community

What are the six essential concepts that the
DMBoK gives for data handling ethics?

3.3 Online 3.5

3.1 Ethical
Data in an Establishing
Principles for
Ethical an Ethical
Data
Context Data Culture
3.4 Risks of
3.2 Principles Unethical 3.6 Data
Behind Data Data Ethics and
Privacy Law Handling Governance
Practices

New England Data Management Community

Name and define three tenets of bioethics that provide
a starting point for principles of data ethics

Respect for
Dignity Autonomy
Persons

Do No Maximize
Beneficence
Harm Benefits

Justice Fair Equitable

New England Data Management Community

List the European Data Protection Supervisor's four pillars required for
an information ecosystem that ensures ethical treatment of data

EDPS
Future-oriented

Accountable

Empowered
individuals
controllers
regulation

conscious
New England Data Management Community Privacy-
What are the seven principles of the General Data
Protection Regulation of the EU (GDPR)?
Lawfulness, fairness, and transparency

Purpose limitation

Data minimization

Accuracy

Storage limitation

Integrity and confidentiality (security)

Accountability

New England Data Management Community

Name at least five of the ten statutory obligations of the Canadian
privacy law PIPEDA (Personal Information Protection and Electronic
Documents Act)

Accountability

Identifying Limiting
Consent
purposes collection

Limiting Use,
Disclosure, Accuracy Safeguards
and Retention

Individual Challenging
Openness
access compliance

New England Data Management Community

What are the five Fair Information Processing Principles
recommended by the US Federal Trade Commission (FTC)?

Notice/
Awareness

Enforcement/ Choice/
Redress Consent

Integrity/ Access/
Security Participation

New England Data Management Community

Name at least four of eight additional FTC focus
areas for fair information practices
Choice
Privacy
Data
By
Mgmt
Design

Educa- Do Not
tion
FOCUS Track

Con-
Access
Platform sent
Data
Transpar
ency

New England Data Management Community

Identify a global trend affecting information
privacy and risk

New England Data Management Community

List four principles that inform ethical behaviors
online as context for online data

Right to Be
Ownership
Forgotten

Freedom
Identity
of Speech

New England Data Management Community

 challenges

Timing

Misleading Visualizations

New England Data Management Community

Unclear Definitions or
Invalid Comparisons

Bias

Transforming and
Integrating Data

Obfuscation / Redaction
of Data
Identify six unethical data handling practices or
How does timing create risk of unethical data handling?

New England Data Management Community

How do misleading visualizations create risk of
unethical data handling?

30% 50%

30%

New England Data Management Community

What are two ways that unclear definitions or invalid
comparisons create risk of unethical data handling?

New England Data Management Community

List at least three of five types of bias that create
risk of unethical data handling
Data
Collection for
pre-defined
result

Context Biased use

and of data
Culture collected

BIAS

Biased Hunch
sampling and
methodology
search

New England Data Management Community

List four data integration practices that create risk
of unethical data handling

Limited knowledge
Data of poor
of data’s origin and
quality
lineage

Integration

No documentation
Unreliable of data
Metadata remediation
history

New England Data Management Community

List three instances of data obfuscation / redaction
practices that create risk of unethical data handling

Data Data
Masking Aggregation

Data Marking

New England Data Management Community

How do large data sets and data lakes raise practical
data ethics concerns in data science and analytics?

Individuals
identified
after
anonym-
ization

Sensitive
data not
analyzed
for
protection

New England Data Management Community

Define a process that moves an organization
toward establishing an ethical data culture

Review Identify Create an Adopt a

Current Principles, Ethical Data Socially
State Data Practices, Handling Responsible
Handling and Risk Strategy and Ethical Risk
Practices Factors Roadmap Model

New England Data Management Community

What is the first step toward establishing an
ethical data culture and what are its outcomes?

• Data • Data
Understand handling Document Collection
the Current practices Ethical
State Principles • Use
• Employee
awareness • Oversight

New England Data Management Community

Give an example of ethical data handling
principle, risk, and practice supported by controls.
• Right to privacy about
PRINCIPLE personal health info (PHI) =
accessible only to caregivers

• Public access to PHI could

RISK jeopardize privacy

• Only nurses/doctors may

PRACTICE access PHI for providing care

• Annual user review of PHI

CONTROL systems

New England Data Management Community

Give at least four of seven components of an
ethical data handling strategy.
Values statements

Ethical Data Handling Principles

Compliance Framework

Risk Assessments

Training and Communications

Roadmap

Auditing and Monitoring

New England Data Management Community

List and define four risk areas of an ethical data
sampling project that uses personal data
• How populations
Identification selected for study

Behavior • How data will be

capture captured

BI/Analytics/ • What activities

Data Science analytics will focus on

• How results will be

Results made accessible

New England Data Management Community

What ethical risks of the identification of a population for
data science analysis may require ethical and legal review?

New England Data Management Community

What ethical risks of behavior capture for data science
analysis may require ethical and legal review?

New England Data Management Community

What ethical risks of BI/Data Science/Analytics
may require ethical and legal review?

New England Data Management Community

What ethical risks of distributing the results of data
science analysis may require ethical and legal review?

New England Data Management Community

Give at least two of four examples of how to use a risk
model to execute a data handling project ethically

Risk Model

Anonymize data

Remove private information

Tighten security

Review applicable privacy law

New England Data Management Community

What are the roles and responsibilities for
oversight of ethical data handing?
• Set Standards and
Data Policies
Governance • Oversight of Data
Handling

Legal • Keep up to date on

legal changes
Counsel • Employee awareness

• Fair Handling
Employees • Reporting Protection
• Non-Interference

New England Data Management Community

Give at least three of five ethical obligations for members of
DAMA as included in the DAMA Code of Ethics.
Observe DAMA bylaws

Practice DAMA ethics and

values

Education and lifelong learning

in data management

No harassment or bullying

Promote DAMA’s image

New England Data Management Community

Give at least three of six additional ethical obligations for officers and
advisors of DAMA as included in the DAMA Code of Ethics.

Actively support DAMA programs

Not profit personally from my

performance as an officer

Raise conflicts of interest to the DAMA

Ethics Officer

Conduct all DAMA business under its

values and ethics

All DAMA communications are official

and on the record

Protect member PII and do not

distribute or sell it

New England Data Management Community

Thank You For Attending!
• Just a reminder, our chapter meets regularly, and we continue to
update our schedule of events and Website content…visit often
• CDMP Study Group is still open – we invite you to join the chapter
and get involved!
• If you are interested in joining our Chapter, please contact
membership@damanewengland.org or any board member via our
website or email.

If you are not on our mailing list, please email marketing@damanewengland.org.

We’d love to stay in touch!

New England Data Management Community

Q&A

New England Data Management Community