44/72 111972/2020/CL&ES
9. TechnologyArchitecture The Committee consideredsome technology related guiding principles that can be used for creating and functioning of shared data directories / data bases, and for digitally implementing the rules and regulations related to data sharing. Key Takeaways – Technology Architecture API mechanisms for accessing data Data security – storage in distributed format Creating a standardized data exchange approach (regardless of data type, exchange method or platform) Prevent de-anonymization – Best of breed Differential Privacy algorithms
9.1. The guiding principles for such a technology architecture include:
i. Mechanisms for accessing data – A number of different mechanisms exist for accessing data including downloads, Application Programming Interfaces (APIs), and data sandboxes. o All sharable Non-Personal Data and datasets created or maintained by government agencies, companies, startups, universities, research labs, non-government organisations, etc. should have a REST (Representational State Transfer) API for accessing the data. o Data sandboxes can be created where experiments can be run, algorithms can be deployed and only output being shared, without sharing the data.
ii. Distributed for data security –data storage in a distributed format so that there is no single point of leakage; sharing to be undertaken using APIs only, such that all requests can be tracked and logged; all requests for data must be operated after registering with the company for data access etc.Even when data is stored in a distributed or federated form, as appropriate, there could be coordinated management of them like would be required for data trusts and data infrastructures for important Non-Personal Data in different sectors.
iii. Creating a standardized data exchange approach (regardless of data type, exchange method or platform) o Data that is collated should be available appropriately on a data exchange for stakeholders to use and make inferences. o Exchange should be able to take-in any form of data and produce output that is standardized and usable to all stakeholders.
44
