G06 · TOPIC · rights-and-disclosureGCRI dossier · service level R0
GCRINexus RegistryEstablished
Topic dossier · Nexus Registry

Rights and disclosure

Every record carries rights: who owns the content, under what licence it may be reused, who may see it and when it may be withdrawn. Openness serves verification and reuse, but some records hold personal, sensitive, culturally protected or commercially restricted information. This page sets out how licences, access classes, embargoes and withdrawals are recorded, where they conflict, and what rights holders and reviewers need before a record is disclosed to a wider audience.

01In brief

The short answer.

Data licences state on what terms a record may be reused; with access classes, embargoes and withdrawal rules they decide who may see a record and when. Openness serves verification and reuse, while some records hold personal, sensitive, culturally protected or commercially restricted information that needs review before wider release.

02Geography

People and hazards in World.

For rights and disclosure, in GCRI's spatial-intelligence reading, the map opens on true-colour imagery, population density and night lights with true colour from NASA GIBS, framed on World; every other NASA layer, live feed and forecast waits in the layer list.

The interactive map needs JavaScript; the layer list and sources are below.

Layers 3

People and hazards, for this page

Latest available

NASA GIBS / EOSDIS · ASTER GDEM (METI, NASA) · Blue Marble (NASA) · © OpenStreetMap contributors (ODbL) · Natural Earth

Loading the latest NASA imagery.

Drag to move. Ctrl or ⌘ and scroll, pinch or the buttons to zoom; hover for the values under the pointer; reset returns to the region.

For rights and disclosure, in GCRI's spatial-intelligence reading, the map opens on true-colour imagery, population density and night lights with true colour from NASA GIBS, framed on World; every other NASA layer, live feed and forecast waits in the layer list.Satellite and model products as NASA publishes them, each with its own date; indicators, not assessments of any place; claim ceiling INTEGRATED.

Data: NASA GIBS · ASTER GDEM · Blue Marble · © OpenStreetMap contributors · Natural Earth · GDACS · Copernicus Sentinel-2 L2A · NASA HLS S30Sources and licences

  • We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • VIIRS near-real-time products (flood, land surface temperature, snow cover, corrected reflectance), NASA LANCE; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • Center for International Earth Science Information Network (CIESIN), Columbia University. 2018. Gridded Population of the World, Version 4 (GPWv4): Population Density, Revision 11. NASA Socioeconomic Data and Applications Center (SEDAC). Licensed under CC BY 4.0. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). CC BY 4.0
  • VIIRS Black Marble night-time lights, NASA Goddard Space Flight Center; distributed by the NASA Level-1 and Atmosphere Archive and Distribution System (LAADS DAAC); imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • MODIS land products (vegetation indices, gross primary production, land cover), NASA LP DAAC and LANCE; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • ASTER GDEM is a product of METI and NASA (ASTER Global Digital Elevation Model V003, NASA LP DAAC); imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • Made with Natural Earth. Free vector and raster map data @ naturalearthdata.com. Public domain
  • © OpenStreetMap contributors (ODbL), via NASA GIBS (coastlines, boundaries, roads and place names). Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). ODbL
  • Blue Marble, NASA Earth Observatory; imagery via NASA GIBS. Colours redrawn from the published colour map; values averaged into H3 cells where shown (modified). NASA open data
  • Context on the globe and flat map: coastlines, boundaries, roads and place names from NASA GIBS reference layers (OpenStreetMap data, ODbL, © OpenStreetMap contributors); Blue Marble imagery as an optional base; 3D terrain and the elevation read-out from the ASTER GDEM elevation colour index (5 m to 200 m classes, exaggerated for legibility). Boundaries are drawn as published and imply no position on any territory.
  • Globe: MapLibre GL JS 6.9.1, BSD-3-Clause, © MapLibre contributors.
  • Live: GDACS (EC JRC / UN OCHA) Events are indicative, not official warnings.
  • Observed (EO): Copernicus Sentinel-2 L2A (contains modified Copernicus Sentinel data 2026), Microsoft Planetary Computer
  • Observed (EO): NASA HLS S30 (contains modified Copernicus Sentinel data 2026). We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS).
  • Optional layers (35 sources in the layer list: live, forecast, observed and context) print their provider credit on the map and here when switched on; forecasts are model output and derived indices are estimates.

Layers and dates

  • True colour: VIIRS NOAA-20 corrected reflectance, NASA LANCE · 13 Oct 2026
  • Population density, 2020: Population: CIESIN, Columbia University, Gridded Population of the World v4.11 (2018), NASA SEDAC, CC BY 4.0 · static
  • Night-time lights, daily: VIIRS Black Marble (VNP46A2), NASA LAADS DAAC · 12 Oct 2026
  • Land cover type (IGBP), yearly: MODIS Terra and Aqua land cover (MCD12Q1), NASA LP DAAC · 2024
  • Flood water, 3-day composite: VIIRS Global Flood Product, NASA LANCE · 14 Oct 2026
  • Land surface temperature, day, 8-day composite: VIIRS NOAA-20 Level 3, 8-day, NASA LANCE · 14 Sep 2026

03Console

Interoperability console, in outline.

The working screen behind this subject: its structure, terms and states. Names are placeholders and values illustrative.

Interoperability console

Rights and disclosure · Crosswalk · Profile v2

Test suite runningGCRI · Nexus Registry

Field mappings

identifieridcopyPass
evidence_labelquality.labelenum mapPass
licencerights.licenceSPDX idAmbiguous
versionversionsemverPass

Conformance

Required fields97 · req 100Controlled terms97 · req 95Round trip83 · req 95
Interoperability console: the screen's structure, terms and states for Rights and disclosure.Placeholder names and illustrative values; a design, not a record or a live system.
04The question

Rights and disclosure: how the risk develops.

Publication rights, withdrawal and audience. The dossier below sets out how the risk develops, what is measured, where the data come from, how it is modelled and who decides.

Mechanism

Licence ambiguity

A record has no licence, a licence in prose only, or one licence on the landing page and another in the metadata. Careful reusers avoid it, careless ones reuse it wrongly, and holders cannot enforce terms that were never stated clearly.

Mechanism

Audience leakage

A record meant for a programme team is exported, cached or indexed alongside public ones. Restricted fields appear in search results or partner copies, and once harvested the disclosure cannot be reversed.

Mechanism

Embargo slippage

Embargo end dates are recorded but not enforced, or enforced but not recorded. Content is released early against agreements, or stays closed long after obligations end, defeating the openness that funders require.

Mechanism

Withdrawal against the record

A rights holder asks for removal while the scholarly record calls for persistence. Erasure rights, takedown notices and retraction norms pull in different directions, and an unrecorded removal leaves citations pointing at nothing.

05Key terms

Terms used on this page.

Each term as this page uses it. Where a standard-setting body defines the term, the wording follows that body.

TermDefinition
Machine-readable licenceA licence expressed in a standard identifier or vocabulary, such as SPDX or a Creative Commons URL, that software can read.
EmbargoA set period during which a record is withheld from a wider audience before release.
Access classA category that sets which audience may see a record, from public to restricted.
06Indicators

What is measured, and how well.

Each indicator carries its unit, its cadence, the kind of source behind it and the evidence label a value would carry. No values are shown: a programme supplies them under its own authority.

IndicatorUnitCadenceSource typeLabel
Records with a machine-readable licenceshare of recordsmonthlyLicence metadataOBSERVED
Records with an access classshare of recordsmonthlySchema validationOBSERVED
Licence conflicts between metadata and landing pagecountquarterlySampled comparisonOBSERVED
Embargoes past their end date and unreleasedcountweeklyEmbargo registerOBSERVED
Withdrawal and takedown requestscount by stated groundquarterlyCase recordsREPORTED
Time to act on a takedown requestdaysper caseCase recordsOBSERVED
Disclosure reviews completed before wider releaseshare of releasesmonthlyReview recordsOBSERVED
07Canvas

From sources to decisions.

The topic as a computational graph: named sources feed the methods, an evidence review gates the outputs, and the decisions stay with the authorities that hold them.

Pipeline canvas · Rights and disclosure as a run graphDesign, not a record
Rights and disclosure: from a source to a labelled evidence recordA source is registered with its licence and steward, checked for quality and coverage, labelled by evidence class, versioned and published with a passport; corrections create a new version. Design of the process, not a record of a run.

Fig. 02Nodes carry their type, two metric rows and a state; connectors show what feeds what; dashed frames name the owners; the timeline is the cadence. Design of the pipeline, not a record of a run.

08Sources

Where the evidence comes from.

Named public datasets and institutional records, each with its licence class. Sources by agreement are used only under their terms and never republished.

SourceWhat it givesLicence class
Creative Commons licence suiteStandard licences with machine-readable identifiers for reuse termsLicence texts free to use
SPDX License ListStandard short identifiers for software and data licencesOpen data, free to reuse
RightsStatements.orgStandard statements of copyright and reuse status for cultural and research objectsOpen, free to apply
Local Contexts HubTraditional Knowledge and Biocultural Labels and Notices attached to recordsFree to use under Local Contexts terms
Sherpa RomeoPublisher and journal policies on self-archiving and embargoesFree to search, Jisc terms
W3C ODRL Information ModelA vocabulary for permissions, prohibitions and duties in machine-readable formW3C document licence, free to implement
cOAlition S Journal Checker ToolRoutes to compliance with funder open access requirementsFree to use
09Decisions

Who decides, and what the evidence serves.

Nexus Registry prepares evidence. The decisions below are taken by the authorities named, under their own rules, and never by the platform.

Who decidesThe questionEvidence this page serves
Rights holders and authorsUnder which licence and to which audience a record may be releasedFunder requirements, publisher policies and the record's sensitive fields
Data protection officersWhether personal data in a record may be disclosed, restricted or erasedAccess class, lawful basis, retention and the public interest in a persistent record
Indigenous data governance bodiesWhether and how community data or knowledge may be sharedCARE principles, Local Contexts labels and the community's recorded terms
Platform publishers and repository managersWhether to act on a takedown or withdrawal requestThe request's grounds, the rights record and the policy for leaving a tombstone

Outputs this topic produces

  • Rights panels showing licence, rights holder, access class and embargo for every record
  • A disclosure review step before any record moves to a wider audience
  • A withdrawal and takedown route with its grounds and the tombstone it leaves
  • Machine-readable licence identifiers carried in every export
10Core questions

What experts ask about disclosure.

  • Who holds the right to publish a record, and who can veto it?
  • How should audiences be defined when a record is useful but sensitive?
  • When does a public interest in disclosure outweigh a private interest in protection?
  • How is protected and Indigenous knowledge kept under its holders' control?
  • What remains visible after a record is withdrawn?
11Mechanisms

Why disclosure decisions are hard.

Disclosure risk is cumulative. A record that is harmless alone can identify a person or a vulnerable site when combined with others, which is why statistical agencies apply disclosure control before releasing data. Rights are also layered: an author may hold copyright, a funder may require open access, a community may hold collective rights over traditional knowledge, and a data subject holds privacy rights that override both.

Research data communities summarize the aim as findable, accessible, interoperable and reusable, while principles for Indigenous data governance add collective benefit, authority to control, responsibility and ethics. The Registry's three classes, public, restricted and protected, are described on rights and visibility.

12Methods and limits

How rights are applied.

  1. 01

    Classification at entry

    Each record receives a visibility class and licence before release, decided by its owner within the law.

  2. 02

    Audience control

    Restricted records are visible only to people authorized for a purpose, enforced with access controls from cybersecurity and cryptography.

  3. 03

    Withdrawal

    Withdrawal removes a record from public view; its identifier resolves to a notice with the date and any replacement.

  4. 04

    Limits

    Nothing published can be fully recalled. Disclosure judgements involve values as well as rules, and re-identification risk changes as other data becomes available.

13Methods

How it is studied, and what the methods cannot say.

  1. Cybersecurity and cryptographyTamper-evident record history · Signed exports and releases · Threat modelling of edit pathsApplied here
  2. Digital identity and public digital systemsIssuer authentication and authority · Contributor disambiguation by the personApplied here
  3. Data engineering, interoperability and stewardshipSchema-validated ingestion · Persistent identifier reconciliation · Lineage capture in pipelinesApplied here
14Questions

Questions and answers.

Why is a record without a licence a problem?
Because by default most jurisdictions reserve all rights, so careful reusers cannot rely on it and careless ones reuse it anyway. A clear licence protects both the holder and the reuser.
What is left when a record is withdrawn?
A tombstone: the identifier, basic citation metadata and the reason for withdrawal where it can be stated. The content is removed or restricted, and citations still resolve to an explanation.
How do the CARE principles relate to open data?
They complement FAIR by asking who benefits and who decides. For Indigenous data, openness follows the community's authority to control rather than being assumed by default.
Can a published record be made private again?
Its access class can be narrowed, but copies already harvested may persist elsewhere. That is why disclosure review happens before release, not after.
Can the Registry publish a record because it is in the public interest?
No. The Registry cannot make a record public on its own initiative. The owner decides, within the law.
Where do privacy requests go?
To privacy@therisk.global. The acknowledgement gives a reference and names the next step.
Are restricted records listed publicly?
Their existence is disclosed only where the owner allows. Their content is never shown in public views.
Nexus Registry

Bring your expertise to this field.

The current service level is R0: information and enquiries. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.

Have questions?