Hi, Curious learn about experiences of using technology in human rights or governance projects from other organizations. How are you leveraging technology in such projects -for data collection? case management? Complaints handling? Awareness raising? etc? How are you mitigating data protection risks given the sensitive nature of the projects/programme? It would be great to learn from your experiences.
We’re using quite a bit of ICT in our employment project here at the IRC. We’re leveraging CommCare to perform data collection, surveying, and some basic case management. We’re using a local CRM platform and database called Kinz (we’re based in Jordan) to help manage our relation to local firms.
In terms of mitigating data protection risks, I’d say by far one of the most useful tools we have found for assessing and planning mitigations has been getting our leadership team to review and approve our Data Protection Impact Assessment. We’re using the template and guidelines provided by the UK ICO https://ico.org.uk/media/about-the-ico/consultations/2258461/dpia-template-v04-post-comms-review-20180308.pdf
They have a decent amount of info on conducting a DPIA on their website here: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/accountability-and-governance/data-protection-impact-assessments/