Get approval to share data
Regardless of what triggered the request for information, it’s important that your agency has a sound understanding of its data and information holdings, allocated information asset custodians and a documented process in place to respond to requests.
See the Data sharing framework for more information on approval to share data.
Your information asset register will help you identify what information you hold and who the custodian is. It should also include other useful information, such as the security classification of the data and whether any of the data has already been published on the Open Data Portal.
Making your information asset register available through the Queensland Government Enterprise Architecture (QGEA) ICT profiling activity, or publishing the register on your website will help potential users identify what agency holds the data they need and who to approach to request access.
Requests for information may include a use case that identifies a business, policy or economic opportunity such as service delivery enhancement, research or data analytics project, which requires access to your agency's data. The Queensland Government is open by default; therefore, requests to access data and information should be approved unless there is sufficient justification not to do so such as privacy, security or confidentiality.
You should weight the risks associated with sharing the information against the benefits of sharing the information. Where a risk is identified, it should be balanced against the benefits of sharing the information from the user’s perspective. Use your agencies preferred benefits realisation methodology and risk assessment tools to help clarify the the risks and benefits of the sharing activity.
Useful resources:
Sometimes information sharing parameters are defined by legislation such as the Child Protection Act 1999. There may be:
- existing agreements between your agency and the requesting agency that can be extended or re-used
- examples of successful agreements from other agencies that you can leverage to progress the sharing request.
Ensure you confirm there are any existing policies or directives in place that provide specific advice related to sharing data or information.
The type of data requested will have an impact on your decision to share or release. Some data may already be available on the Open Data Portal, or have the potential to be published there. It could also be data that you have already made available through a previous sharing agreement or your departmental website.
Where the data contains personal, sensitive or classified information, you will need to evaluate this as part of the decision-making process. But remember, while privacy and security requirements must be met, they should not prevent shared access to government information when it is permissible.
Useful resources:
Your data may be ready to share as it is, or it may require manipulation, cleansing or extraction. If it contains personal information, you may need to obtain consent to share or undertake a de-identification process such as data masking or aggregation. De-identification may allow you to share datasets with potentially high value without infringing on the privacy of individuals.
Use the information above to determine whether the data can be shared and any constraints that may be required on the use of the shared information. In many cases, the Information Custodian will have the authority to approve the information sharing request, however this may vary from agency to agency.
Ensure that approval to share the requested information is obtained from an appropriate delegate or custodian and that all relevant departmental processes are followed prior to releasing the requested information.
Useful resources:
Some data and information sharing initiatives may be governed by legislation, in which case a formal sharing agreement may not be necessary. However, documenting the details of your sharing arrangement is a useful governance mechanism and provides transparency and clarity for the agencies involved. A new sharing agreement may not be required in every instance, so check to see if there are existing agreements that can be used or reused to include the new sharing arrangement.
If you need to start from scratch, the Data sharing framework provides step-by-step help for developing a new agreement.
Once an agreement has been developed and approved and the data is ready, you can start sharing information and realising the benefits. It is important to monitor the progress of the arrangement to ensure that any controls and conditions specified in the agreement are being met and that any opportunities for innovation or improvement are considered.
Consider sharing your use cases and sharing agreements to support further sharing opportunities by providing success stories or a starting point for others to develop a sharing agreement of their own.