This resource is designed to help development actors increase the effectiveness of digital tools and data, while reducing the risks and the potential for harm.

We often assume that data protection is the job of informational technology (IT) specialists. IT has a role to play, but so does operations staff. Operations staff determine what data to collect and why, while IT staff help ensure the systems used are as secure as possible. Too often our focus is only on the system, and we forget about reviewing risk in our data decisions.

This tool can be used by anyone to identify the risks – for organizations and end users – of collecting and processing personal data.