Standard four of the Standards for Official Statistics in the Code of Practice for Statistics focuses on data governance and how to ensure appropriate and responsible data use when producing statistics. It emphasises the importance of data ethics in guiding statistical practice and aligns with the Five Safes 

Conducting ‘safe projects’ ensures that data collection is done in acceptable ways and will serve the public good.  

Safe handling of data requires a good understanding of legal obligations, as well as technical skills and resources to ensure a sufficient degree of protection to support further use.  

Openness about the approaches used are essential for maintaining public confidence in the producer organisation, as well as the data and statistics. 


The Standard

4. Producers must manage data and statistics safely and securely and be open about how data will be used and protected – so that the public can be confident about providing their own information for official statistics

4.1 Be ethical in how you collect, access, use and share data to serve the public good and be transparent about your approach in a published data management policy

4.2 Consider evidence on the degree to which the collection and use of data for sensitive topics are viewed as acceptable by society, particularly when planning new data collections or exploring new statistical methodologies or in periods of substantial change that impacts an official statistic. Explain your decisions

4.3 Always consider the rights of data subjects and manage in ways that are consistent with data protection legislation. Clearly explain their rights and how their information will be used and protected when collected for statistical purposes

4.4 Keep and handle data safely and securely. Follow all relevant statutory obligations governing the collection, storage, sharing, access, linking and analysis of data. Be transparent about breaches of privacy and act publicly in addressing weaknesses

4.5 Protect the confidentiality of individual and business information when producing statistics. Be transparent about the choices made in line with the producer’s published confidentiality policy and apply appropriate disclosure control methods before release

4.6 Hold regular reviews of the data management arrangements used and share best practice across the organisation to ensure data protection procedures remain effective. Keep pace with changing circumstances such as technological advances


Questions to consider 

1. Safe people

Have you applied a data ethics framework such as the UKSA ethical principles? Have you tested your practice, for example, by using the UKSA Ethics Self-Assessment toolkit? Have you fully considered your legal duties?

2. Safe projects

What evidence is there that reveals how people view data collection and sharing for sensitive topics? How do you ensure your statistics support achieving better outcomes for citizens and serve the public good? How are you ensuring data are inclusive and all relevant groups are robustly captured?

3. Safe data

How well has the data collection approach considered respondent needs in the design? Do you explain to your data subjects how you will use and keep safe their data, in line with data protection legislation such as GDPR?

4. Safe outputs

How do you ensure that you handle data and disseminate statistics using robust disclosure control and data privacy methods and how do you show this?

5. Safe settings

When did you last review your data management approaches? Are they up to date and in line with best practice? In what ways can they be improved? Have you considered transparency, accountability, and fairness in your actions?


Related guidance

Office for Statistics Regulation:  

UK Statistics Authority: 

Government Statistical Service: 

Government Digital Service: 

Central Digital and Data Office: 

Ministry of Justice/Alan Turing Institute: 

National Audit Office: 

Survey Futures: 

UK Data Service: 


Good practice examples: Public trust and data collection

Blogs:

Case study: 


Good practice examples: Data sharing and linkage 

Blogs:

Case study:


Good practice examples: Protecting data 

Case study:


Code of Practice for Statistics