7
edits
(Updated Data Steward names and added additional clarification to Data Steward's role with sensitive review process.) |
(Added clarity in sensitive data review process and group approvals.) |
||
| Line 132: | Line 132: | ||
Facilitators (named above) are expected to express judgement about how much risk is involved and will involve the appropriate reviewers. | Facilitators (named above) are expected to express judgement about how much risk is involved and will involve the appropriate reviewers. | ||
If the level of risk is determined to be low enough and/or there is clear precedent, further discussion may not be necessary and each reviewer may give a sign-off immediately; otherwise, mitigations should be incorporated and documentation updated once they have been addressed. Live discussion is often very helpful – and should be planned for – when there is significant risk involved. | If the level of risk is determined to be low enough and/or there is clear precedent, further discussion may not be necessary and each reviewer may give a sign-off immediately; otherwise, mitigations should be incorporated and documentation updated once they have been addressed. Live discussion is often very helpful – and should be planned for – when there is significant risk involved. One reviewer (after consulting with the full group), is permitted to approve on the group's behalf. | ||
Data collection may not be shipped to users until final sign-offs have been obtained. | Data collection may not be shipped to users until final sign-offs have been obtained. | ||
edits