Rights and visibility
Not every record can be public, and the people and institutions a record concerns have rights over it. Nexus Registry, a platform of The Global Centre for Risk and Innovation (GCRI), is designed to place every record in one of three visibility classes, public, restricted or protected, decided by its owner and by the law that applies. This page explains each class, who decides and how a record can be withdrawn. The current service level is R0: information and enquiries.
- 01In briefThe short answer
- 02ClassesThree visibility classes
- 03Who decidesThe owner decides, within the law
- 04WithdrawalHow a record is withdrawn
- 05Key termsTerms used on this page
- 06RequestsWhere to send a rights request
GCRI · Established · service level R0
The short answer.
Rights in Nexus Registry are the rules that place every record in one of three visibility classes, public, restricted or protected, decided by its owner and by the law that applies. The page explains each class, who decides and how a record can be withdrawn.
Jurisdictions in Pacific Island states.
The jurisdictions that hold authority over this question: countries, their first-level divisions and capitals, shown for Pacific Island states as an example geography for this subject.
Three visibility classes.
Public records
Released for anyone to read and cite, under the licence stated on the record.
Restricted records
Visible only to people authorized for a purpose, such as a project team or reviewers.
Protected records
Records whose disclosure could cause harm, such as personal, safeguarding, security or protected community knowledge.
The owner decides, within the law.
- 01
Owner
The institution or person with authority over the content decides its class and its licence.
- 02
People concerned
People named in a record can exercise their privacy rights, including correction and, where the law provides, erasure.
- 03
Rights-holders
Protected and Indigenous knowledge is never published or used in public examples or model training without its holders' consent.
- 04
Registry
The Registry applies the class and keeps a record of every change. It cannot make a record public on its own initiative.
How a record is withdrawn.
An owner can withdraw a record from public view. The identifier stays, and resolves to a notice that says the record was withdrawn, when, and whether a replacement exists. Withdrawal never erases other parties' lawful work, and it is recorded in the version history.
Terms used on this page.
Each term as this page uses it. Where a standard-setting body defines the term, the wording follows that body.
| Term | Definition |
|---|---|
| Access class | A category that sets which audience may see a record, from public to restricted. |
| Data protection | Legal rules on processing personal data, such as the GDPR, enforced by data protection authorities. |
| Purpose limitation | The principle that data collected for one purpose should not be used for incompatible purposes. |
| Personal data | Any information relating to an identified or identifiable natural person, directly or indirectly, such as a name, an identification number, location data or an online identifier, as the EU General Data Protection Regulation defines it. |
Where to send a rights request.
Privacy and rights requests go to privacy@therisk.global. Safeguarding concerns go to safeguarding@therisk.global, a restricted route. GCRI's approach to personal data is on privacy and data. Each acknowledgement gives a reference and names the next step.
The Global Risks Alliance (GRA) sets out its own data and research rules on GRA data and research; records are never shared across institutions by this page.
Questions and answers.
Can I find out whether a restricted record about me exists?
Can a public record become restricted later?
Who can see protected records?
Does a licence on a public record let me use it for anything?
Can a record be restricted to protect a community?
Around Nexus Registry.
Bring your expertise to this field.
The current service level is R0: information and enquiries. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.