Dissemination - Legal issues
Statistical organizations at the national, supra-national and international levels are increasingly vested with the obligation to disseminate microdata. Nevertheless, there are legal constraints on what these institutions can do and on how they can do it.
Legal principles defined by the international community and reflected in national legislations state that individual data collected by official statistical agencies must be confidential and properly protected. As a result, data producers willing to share their microdata must develop anonymization procedures and assess disclosure risk. Another defining principle is to grant access to microdata for research or statistical purposes only. To guarantee that microdata will be used appropriately, clear and transparent procedures as well as technical arrangements must then be put in place.
The references below provide useful information on how statistical agencies can reconcile the need to protect confidentiality with microdata dissemination.
The "UN Fundamental principles of statistics" define general criteria upon which systems of official statistics should be based. The United Nations Statistics Division (UNSD) has also developed a Good Practices Database to provide examples of national policies and practices implemented according to the Fundamental Principles.
The Committee for the Coordination of Statistical Activities (CCSA) has published the "Principles Governing International Statistical Activities." Another set of guidelines of particular interest are the principles and guidelines of good practices prepared at the request of the Conference of European Statisticians by a Task force on Confidentiality and Microdata on Managing Statistical Confidentiality and Microdata Access. Last, UNECE published the Proceedings of the Seminar Session of the 2003 Conference of European Statisticians held in Geneva, 10-12 June 2003.
The United Kingdom Office for National Statistics produced a National Statistics Code of Practice and various accompanying protocols, including a Protocol on Data Access and Confidentiality. These documents provide a very good example of a transparent, well formulated policy on data management.
