Skip to content

GCRI · Trust and accountability

Data and privacy responsibilities

The Global Centre for Risk and Innovation (GCRI) handles research data, records about programme participants, information from website users and enquirers, and operational records. Each carries its own rights and responsibilities, set out here in plain terms. The formal notice is the privacy notice; GCRI Canada is its controller. Part of trust and accountability.

01Register

Data and privacy responsibilities on the record.

The Global Centre for Risk and Innovation
  1. 01InstitutionThe Global Centre for Risk and Innovation (GCRI)
  2. 02Four kinds of dataDifferent data, different responsibilities
  3. 03PrinciplesHow rights are respected
  4. 04Your rightsAccess, correction and concerns
02Four kinds of data

Different data, different responsibilities.

Responsibility follows the purpose for which data is held, and that purpose limits how it is used.

DataExamplesKey responsibility
Research dataObservations, statistics, model inputs from sources and partnersSource rights and limitations persist; original source authority is retained
Participation recordsRecords about institutions, leaders and experts in programmesUsed for the programme they relate to, under its terms
User and enquiry dataMessages sent to GCRI and website useUsed to answer the enquiry and keep a record of it; never used for marketing
Operational recordsSecurity logs, agreements, accountsKept as required for operation, security and legal obligations
03Principles

How rights are respected.

Purpose

Used for what it was given for

Data is not repurposed beyond the purpose stated when it was collected or agreed.

Separation

No cross-institution sharing

GCRI, the Global Risks Forum (GRF) and the Global Risks Alliance (GRA) each have their own notice and controller. Enquiries are not shared across institutions.

Protection

Protected knowledge stays protected

Protected community and Indigenous knowledge never enters public examples or model training.

04Process

How the process runs.

Process

How a correction moves

Anyone may request a correction without membership; an accepted one becomes a new version, and the earlier version stays on record with the reason.

  1. 01 Reporter

    1. 01Anyone may ask for a correctionActor · AnyoneAnyone may ask for a correction, without membership. No membership or Account is needed to report harm or correct public information.
  2. 02 Route and acknowledge

    1. 02Routed by kind of concernStepA scientific correction or integrity concern goes to the responsible editor or source owner.
    2. 03AcknowledgementRecordAnyone who raises a question, shares local knowledge or reports a concern gets an acknowledgement and an issue disposition.
  3. 03 Review

    1. 04Review by editor or source ownerStep · The responsible editor or source ownerA reviewer with a declared conflict never signs the relevant acceptance.
    2. 05Complaint about a decisionStep · A reviewer not responsible for the decisionA programme or decision complaint is reviewed by someone not responsible for the contested decision.
    3. 06Privacy, security and safeguarding queuesStepPrivacy and rights requests go to the Privacy Officer queue, security reports to the security disclosure queue.
  4. 04 Outcome

    1. 07Accepted correction becomes a new versionRecordAn accepted correction creates a new recorded version.
    2. 08Issue disposition recordedRecordThe reporter gets an issue disposition and, where appropriate, a remedy or referral. The docs name no appeal for a declined correction.
  5. 05 Carried into the record

    1. 09Affected analysis re-run with corrected inputsStep · Foundry pillarThe affected analysis is re-run with the corrected inputs.
    2. 10Change proposal to the standardsRecord · Nexus StandardsMethod and correction findings go to Nexus Standards as change proposals (F06). It records the correction as a change to the evidence.
    3. 11Courses that taught the finding updatedStep · Risk AcademyRisk Academy updates any course that taught the corrected finding.
    4. 12New version with correction and reasonRecord · ReportsReports publishes a new version with the correction and its reason. The earlier version stays on record with the correction history.

Status and service levels · Reports · The programme yearDesigned process, not a record of any case: no cycle has run and every programme is at service level R0, information and enquiries. A gate is a programme decision, never a public-authority approval, a certification or a deployment authorisation. The competent authority decides.

05Your rights

Access, correction and concerns.

You can ask what personal information GCRI Canada holds about you, ask for it to be corrected and raise a concern about how it is handled. Requests go to the Interim Privacy Officer of GCRI Canada at the privacy request form. The acknowledgement gives a reference and names the next step.

National programmes keep their own agenda, data and decision rights. The Global Risks Forum and The Global Risks Alliance have their own notices, for example GRF privacy.

06Questions

Questions and answers.

Who is responsible for my personal data on therisk.global?
GCRI Canada, the Canadian not-for-profit organisation through which GCRI acts as Consortium Secretariat, is the controller for this site. Its Interim Privacy Officer handles privacy requests.
Is my enquiry shared with GRF or GRA?
No. Enquiries are used to answer the enquiry and keep a record of it. If your matter belongs to another institution, we tell you where to write rather than forwarding your data.
How is research data about places or communities protected?
Through rights schedules agreed with sources and communities, aggregation in public outputs and the rule that restricted or protected material never appears in public examples.
Where are the formal terms?
In the privacy notice of therisk.global, which names the controller, purposes, legal bases, recipients, retention and your rights by region.
The Global Centre for Risk and Innovation

Bring a method, a dataset or a question.

Information and enquiries are open today. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.