Consent, privacy and fairness
Evaluate whether information use is authorised, necessary and equitable.
Covered in this guide
- Distinguish access from permission.
- Apply purpose limitation and data minimisation.
- Consider unequal impact and reasonable alternatives.
Having technical access to information does not create permission to use it. Responsible decisions define the purpose, lawful authority, minimum data and people affected before processing begins.
Consent is specific, not a blanket yes
Having technical access to information does not create permission to use it. Responsible decisions define the purpose, lawful authority, minimum data and people affected before processing begins.
Data reused beyond the original ask
A student society collected email addresses for event registration and later wants to give the list to a sponsor for recruitment.
Try this
Assess the proposal and identify a compliant alternative.
Review answer guidance
The original collection purpose does not automatically cover sponsor recruitment. Do not disclose the list without appropriate notice and valid permission. The society can send an invitation itself and allow students to opt in directly to the sponsor.
How fairness items are written
State what was agreed, what would be a new use, and who can refuse. If the task withholds that information, say so.