L1 - Conception and Scoping

To know more about this phase of the DPI life cycle, click here

Click on any process listed below to learn about illustrative practices that can be implemented.

Process	Principle	Risk
F3.2 Implement affirmative design measures	F3 Do not exclude	SV2 Weak rule of law
F5.1 Establish transparency and full documentation for data sharing arrangements	F5 Uphold the rule of law	RS1 Privacy vulnerability RS4 Lack of recourse
F5.2 Underpin identification systems (and other DPI systems) by legitimate, comprehensive, and enforceable legal and regulatory frameworks	F5 Uphold the rule of law	SV1 Digital distrust SV3 Weak institutions
F6.2 Design and deploy mechanisms that provide individuals and communities with control over their personal and collective data	F6 Promote autonomy and agency	RI4 Disempowerment SV1 Digital distrust
F7.1 Forward relevant stakeholder inputs to the DPI implementors.	F7 Foster community engagement	SV3 Weak institutions RI4 Disempowerment
F9.2 Ensure adequate resourcing for continuous development.	F9 Focus on future sustainability	SV5 Unsustainability
O1.2 Establish policies that promote fair competition and require multiple participants in the ecosystem	O1 Leverage market dynamics	SV5 Unsustainability
O1.3 Mitigate the risk of market distortion and monopolies	O1 Leverage market dynamics	SV3 Weak institutions
O2.1 Assess DPI against alternative policy options	O2 Evolve with evidence	SV5 Unsustainability RI1 Discrimination
O3.1 Verify the existence and enforcement of regulations, policies and procedures that mandate purpose limitation.	O3 Ensure data privacy by design	RS1 Privacy vulnerability SV2 Weak rule of law
O3.2 Undertake a Data Protection Impact assessments and legislative reforms prior to DPI roll out	O3 Ensure data privacy by design	RS1 Privacy vulnerability SV2 Weak rule of law
O3.3 Analyze stakeholder interests and implement approprate safeguards	O3 Ensure data privacy by design	RS1 Privacy vulnerability SV2 Weak rule of law
O3.4 Provide features to protect users from tracking and profiling while allowing responsible data use	O3 Ensure data privacy by design	SV1 Digital distrust RI4 Disempowerment
O4.1 Establish a framework for safe data storage and processing	O4 Assure data security by design	RS2 Digital insecurity
O4.2 Establish a cybersecurity framework for DPI	O4 Assure data security by design	RS2 Digital insecurity
O5.1 Implement privacy and data protection impact assessments prior roll-out	O5 Ensure data protection during use	SV2 Weak rule of law RS1 Privacy vulnerability
O5.2 Require relying parties to register their DPI use cases in a public registry, detailing the specific functionalities and data attributes they intend to use.	O5 Ensure data protection during use	SV1 Digital distrust
O6.2 Understand the needs of affected communities and test the impact of DPI on these groups.	O6 Respond to gender, ability or age	RI4 Disempowerment RI3 Exclusion
O6.3 Ensure equitable access to DPI	O6 Respond to gender, ability or age	RI2 Unequal access RI3 Exclusion
O6.4 Include networks of human agents to help users utilize and engage with DPI systems	O6 Respond to gender, ability or age	RI2 Unequal access RI3 Exclusion
O8.1 Estimate the costs of deployment, operational costs, and estimate payback period	O8 Sustain financial viability	SV5 Unsustainability
O8.2 Design the sustainable financing model for the DPI	O8 Sustain financial viability	SV5 Unsustainability