HERITAGE ALLIANCE · DATA & KNOWLEDGE
Ethical principles and regulatory considerations adapted from the source portal. Applicable law, approvals and oversight must be confirmed for each project and institution.
Explain intended uses clearly and establish an appropriate consent or other lawful basis.
Limit collection, access and retention to what the approved purpose requires.
Assess privacy throughout collection, transformation, analysis and publication.
Consider fair participation and benefits; prevent discriminatory or harmful uses.
This is explanatory context, not a statement that a project satisfies any particular legal framework.
Where GDPR applies, assess lawful processing, individual rights, accountability and international transfers.
Consider regional governance principles, national sovereignty and local capacity.
Confirm local law, NPHI responsibilities and relevant ethics or regulatory requirements.
The source describes a four-stage review involving its own committee and relevant national bodies. Heritage committee appointments and review authority are not established by that description.
Check the purpose, data sensitivity and expected benefits and risks.
Seek review from the responsible institutional and national bodies where required.
Document approvals, limitations, safeguards and responsibilities.
Track compliance with conditions and respond to changes or incidents.
Contact Heritage to identify the appropriate data owner or institutional review contact.