GCRI · Trust and accountability
Data and privacy responsibilities
The Global Centre for Risk and Innovation (GCRI) handles research data, records about programme participants, information from website users and enquirers, and operational records. Each carries its own rights and responsibilities, set out here in plain terms. The formal notice is the privacy notice; GCRI Canada is its controller. Part of trust and accountability.
Data and privacy responsibilities on the record.
- 01InstitutionThe Global Centre for Risk and Innovation (GCRI)
- 02Four kinds of dataDifferent data, different responsibilities
- 03PrinciplesHow rights are respected
- 04Your rightsAccess, correction and concerns
Different data, different responsibilities.
Responsibility follows the purpose for which data is held, and that purpose limits how it is used.
| Data | Examples | Key responsibility |
|---|---|---|
| Research data | Observations, statistics, model inputs from sources and partners | Source rights and limitations persist; original source authority is retained |
| Participation records | Records about institutions, leaders and experts in programmes | Used for the programme they relate to, under its terms |
| User and enquiry data | Messages sent to GCRI and website use | Used to answer the enquiry and keep a record of it; never used for marketing |
| Operational records | Security logs, agreements, accounts | Kept as required for operation, security and legal obligations |
How rights are respected.
Used for what it was given for
Data is not repurposed beyond the purpose stated when it was collected or agreed.
No cross-institution sharing
GCRI, the Global Risks Forum (GRF) and the Global Risks Alliance (GRA) each have their own notice and controller. Enquiries are not shared across institutions.
Protected knowledge stays protected
Protected community and Indigenous knowledge never enters public examples or model training.
How the process runs.
Process
How a correction moves
Anyone may request a correction without membership; an accepted one becomes a new version, and the earlier version stays on record with the reason.
01 Reporter
- 01Anyone may ask for a correctionActor · AnyoneAnyone may ask for a correction, without membership. No membership or Account is needed to report harm or correct public information.
02 Route and acknowledge
- 02Routed by kind of concernStepA scientific correction or integrity concern goes to the responsible editor or source owner.
- 03AcknowledgementRecordAnyone who raises a question, shares local knowledge or reports a concern gets an acknowledgement and an issue disposition.
03 Review
- 04Review by editor or source ownerStep · The responsible editor or source ownerA reviewer with a declared conflict never signs the relevant acceptance.
- 05Complaint about a decisionStep · A reviewer not responsible for the decisionA programme or decision complaint is reviewed by someone not responsible for the contested decision.
- 06Privacy, security and safeguarding queuesStepPrivacy and rights requests go to the Privacy Officer queue, security reports to the security disclosure queue.
04 Outcome
- 07Accepted correction becomes a new versionRecordAn accepted correction creates a new recorded version.
- 08Issue disposition recordedRecordThe reporter gets an issue disposition and, where appropriate, a remedy or referral. The docs name no appeal for a declined correction.
05 Carried into the record
- 09Affected analysis re-run with corrected inputsStep · Foundry pillarThe affected analysis is re-run with the corrected inputs.
- 10Change proposal to the standardsRecord · Nexus StandardsMethod and correction findings go to Nexus Standards as change proposals (F06). It records the correction as a change to the evidence.
- 11Courses that taught the finding updatedStep · Risk AcademyRisk Academy updates any course that taught the corrected finding.
- 12New version with correction and reasonRecord · ReportsReports publishes a new version with the correction and its reason. The earlier version stays on record with the correction history.
Status and service levels · Reports · The programme yearDesigned process, not a record of any case: no cycle has run and every programme is at service level R0, information and enquiries. A gate is a programme decision, never a public-authority approval, a certification or a deployment authorisation. The competent authority decides.
Access, correction and concerns.
You can ask what personal information GCRI Canada holds about you, ask for it to be corrected and raise a concern about how it is handled. Requests go to the Interim Privacy Officer of GCRI Canada at the privacy request form. The acknowledgement gives a reference and names the next step.
National programmes keep their own agenda, data and decision rights. The Global Risks Forum and The Global Risks Alliance have their own notices, for example GRF privacy.
Questions and answers.
Who is responsible for my personal data on therisk.global?
Is my enquiry shared with GRF or GRA?
How is research data about places or communities protected?
Where are the formal terms?
Bring a method, a dataset or a question.
Information and enquiries are open today. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.
Legal documents.
Maps, data and figures on this site are shown for context and general information. They are not advice, forecasts or warnings; the limits of the information are set out in the Disclaimers and Data Notices.