Data protection by design: building the foundations of trustworthy data sharing

Data trusts have been conceived as a mechanism to enable the sharing of data across entities where other formats, such as open data or commercial agreements, are not appropriate, and make data sharing both easier and more scalable. By our definition, a data trust is a legal, technical and organisational structure for enabling the sharing of data for a variety of purposes. Data trusts, as well as related structures such as data collaboratives, which attempt to create trust in order to facilitate data sharing, and create benefit to individuals, groups of individuals, or society at large, require at a minimum a process-based mechanism, i.e. a workflow, that should have a trustworthiness-by-design approach at its core. Data protection by design (DPbD) should be a key component of such an approach.