HERITAGE ALLIANCE · DATA & KNOWLEDGE
Reference governance and protection measures from the source portal. Their inclusion explains the design; it does not verify deployment, certification or compliance at Heritage.
Define source-institution custodians, coordination responsibilities and review of stewardship decisions.
Document data classification, access decisions, retention and incident handling.
Maintain clear catalogue metadata, decision records and stakeholder communication.
Align access controls, audit records and federated architecture with the agreed policies.
The source lists the following measures. Heritage implementation and coverage require evidence before they can be presented as established controls.
Techniques described by the source include anonymisation or pseudonymisation, differential privacy, synthetic training data, federated learning, secure multiparty computation and disclosure-risk assessment. Choose and validate suitable methods for the actual data and purpose; no universal anonymity guarantee is implied.
The source presents GDPR and OHDSI/OMOP compliance, with ISO 27001 and HIPAA alignment. No linked certification, independent audit or Heritage applicability evidence was found. These source statements are not reproduced as Heritage badges. Ask for the relevant policy, audit scope or institutional evidence before relying on a claim.
Contact Heritage to confirm the responsible institution and the requirements applicable to your proposed use.