RightsRelay / Digital safety in the public interest
← Analysis and guidance

Open data & responsibility

Public data is not harmless data

Why availability, context and responsible use are three different questions.

Availability changes when data is aggregated

A single local record may be difficult to find and easy to interpret in context. A searchable copy joined with addresses, usernames or family links can make the same information persistent and actionable at scale.

This is the difference between theoretical availability and practical exposure. Collection, indexing and redistribution can change who can use information, how quickly and for what purpose.

Ask three questions before reusing personal data

Responsible use begins before downloading a dataset or copying a profile. The fact that a system permits access is only one part of the decision.

  1. Purpose: what concrete benefit requires this personal information?
  2. Proportion: can the goal be met with fewer fields, aggregation or delayed publication?
  3. Impact: could searchability, combination or permanence create a risk the source did not?

Context is a security control

Dates, source limitations and correction paths help prevent old or partial information from becoming a permanent label. Sensitive datasets should have ownership, access controls and a defined retention period.

For public-interest work, document why publication is necessary and consider whether names or direct identifiers add value. For product teams, treat scraping and enrichment as data-processing decisions, not merely engineering shortcuts.

Further reading

Primary and authoritative external sources used to support the guidance and provide additional context. RightsRelay is not affiliated with them.