Changes for page Guidelines for Confidentiality and Embargo in SDMX
Last modified by Artur K. on 2026/05/29 14:28
Summary
-
Page properties (1 modified, 0 added, 0 removed)
Details
- Page properties
-
- Content
-
... ... @@ -70,12 +70,13 @@ 70 70 71 71 The forwarding of confidential data is represented as follows in SDMX: 72 72 73 -{{box}} 74 -**SDMX representation** 73 +|((( 74 +(% class="wikigeneratedid" id="HSDMXrepresentation-1" %) 75 +SDMX representation 75 75 76 76 * **CONF_STATUS**: N; 77 77 * **CONF_REDIST **(Observation, Conditional): [Organisation(s)]; 78 - {{/box}}79 +))) 79 79 80 80 === Adding embargo information to a data message === 81 81 ... ... @@ -104,7 +104,7 @@ 104 104 * (Recommended) With UTC indicator: 2017-12-15T14:02:29Z 105 105 * With timezone indicator: 2017-12-15T15:02:29+01:00 106 106 107 - ===//Enabling the frontloading of data into systems//===108 +**//Enabling the frontloading of data into systems//** 108 108 109 109 If the goal is to allow frontloading of a whole data message into systems so that the data can be made visible to users at the expiry of the embargo date/time, the header section of the message should contain an embargo date/time attribute. This implies that all information in the data message is under the embargo date/time set in the header. The header attribute EmbargoDate with format date/time/time zone indicates until when the whole data message received cannot be shared with any recipient users. 110 110 ... ... @@ -124,34 +124,38 @@ 124 124 125 125 In data flows that feature confidential data, CONF_STATUS is highly recommended to be a mandatory attribute. However, if CONF_STATUS is optional in the DSD and missing from an observation, it is always implied to be “F” (free). 126 126 127 -== Use of the CONF_REDIST attribute == 128 +=== Use of the CONF_REDIST attribute === 128 128 129 129 The CONF_REDIST attribute defines the secondary recipient(s) to whom the sender allows the primary recipient to forward confidential data. It is recommended to be an optional attribute at observation level. Ideally it should reference a shared code list containing standard organisation codes. To allow several secondary recipients there are these possibilities: 130 130 131 -1. Use a code that represents multiple organisations, or; 132 -1. Use several CONF_REDIST attributes to portray the multiple recipients. Each attribute represents one recipient and references the same codelist. This implementation is cleaner than the above point 1, though this will require adding as many attributes to your DSD as there are potential recipients of the redistributed confidential data. 132 +Use a code that represents multiple organisations, or; 133 133 134 +Use several CONF_REDIST attributes to portray the multiple recipients. Each attribute represents one recipient and references the same codelist. This implementation is cleaner than the above point 1, though this will require adding as many attributes to your DSD as there are potential recipients of the redistributed confidential data. 135 + 134 134 If the EMBARGO_TIME and CONF_REDIST attributes are both used: 135 135 136 136 1. Data is available only to the organisations in CONF_REDIST until EMBARGO_TIME 137 137 1. Data is available to the public after EMBARGO_TIME 138 138 139 -(% style="width:768.957px" %) 140 -|(% colspan="3" style="width:766px" %)((( 141 +|(% colspan="3" %)((( 141 141 (% class="wikigeneratedid" id="HPrivilegedAccess" %) 142 - **Privileged Access**143 +Privileged Access 143 143 ))) 144 -| (% style="width:202px" %)**Use case**|(% style="width:207px" %)**No forwarding**|(% style="width:357px" %)**Forwarding**145 -| (% style="width:202px" %)**Embargo**|(% style="width:207px" %)(((145 +|**Use case**|**No forwarding**|**Forwarding** 146 +|**Embargo**|((( 146 146 CONF_STATUS: E 148 + 147 147 EMBARGO_TIME 148 -)))|( % style="width:357px" %)(((150 +)))|((( 149 149 CONF_STATUS: E 152 + 150 150 EMBARGO_TIME 154 + 151 151 CONF_REDIST 152 152 ))) 153 -| (% style="width:202px" %)**No embargo**|(% style="width:207px" %)CONF_STATUS: N|(% style="width:357px" %)(((157 +|**No embargo**|CONF_STATUS: N|((( 154 154 CONF_STATUS:N 159 + 155 155 CONF_REDIST 156 156 ))) 157 157 ... ... @@ -164,48 +164,49 @@ 164 164 * The national statistical institutes send data to Eurostat, and allow the data to be shared with the ECB for statistical coproduction 165 165 * The data may only be shared with the public on the next day 166 166 167 -* **CONF_STATUS:**E**;** 168 -* **CONF_REDIST: **ECB**;** 169 -* **EMBARGO_TIME=<**T+1 day**, **e.g.** **2017-12-15T10:00:00Z> 172 +**CONF_STATUS:**E**;** 170 170 174 +**CONF_REDIST: **ECB**;** 175 + 176 +**EMBARGO_TIME=<**T+1 day**, **e.g.** **2017-12-15T10:00:00Z> 177 + 171 171 The solutions suggested above aim at covering the most common confidentiality and embargo use cases within a single transmission from the primary reporter to the primary recipient. However, for some more complex scenarios it might still be required to make multiple transmissions. 172 172 173 173 It is strongly recommended that use cases are specified in an agreement between organisations involved in regular transmissions up-front in order to avoid unnecessary delay in data publication or – much worse – confidentiality breaches. 174 174 175 - =Annex 1: SDMX Representation of the confidentiality use cases=182 +**Annex 1: SDMX Representation of the confidentiality use cases** 176 176 177 177 |((( 178 178 (% class="wikigeneratedid" id="HUsecase" %) 179 - **Use case**180 -)))|( % style="width:283px" %)(((186 +Use case 187 +)))|((( 181 181 (% class="wikigeneratedid" id="HCONF_STATUS28Observation29" %) 182 - **CONF_STATUS (Observation)**183 -)))|( % style="width:369px" %)(((189 +CONF_STATUS (Observation) 190 +)))|((( 184 184 (% class="wikigeneratedid" id="HAdditionalattributes" %) 185 - **Additional attributes**192 +Additional attributes 186 186 )))|((( 187 187 (% class="wikigeneratedid" id="HRemarks" %) 188 - **Remarks**195 +Remarks 189 189 ))) 190 190 |((( 191 191 (% class="wikigeneratedid" id="HNon-confidentialdata" %) 192 - **Non-confidential data**193 -)))|( % style="width:283px" %)(((199 +Non-confidential data 200 +)))|((( 194 194 (% class="wikigeneratedid" id="HF" %) 195 195 F 196 -)))|(% style="width:369px" %)((( 197 -(% class="wikigeneratedid" id="H" %) 198 - 199 199 )))|((( 200 200 == == 205 +)))|((( 206 +== == 201 201 ))) 202 202 |((( 203 203 (% class="wikigeneratedid" id="HConfidentialdatawithnoembargo" %) 204 - **Confidential data with no embargo**205 -)))|( % style="width:283px" %)(((210 +Confidential data with no embargo 211 +)))|((( 206 206 (% class="wikigeneratedid" id="HC3BD3BS3BA3BO3BT3BG3BM3BN" %) 207 207 C;D;S;A;O;T;G;M;N 208 -)))|( % style="width:369px" %)(((214 +)))|((( 209 209 (% class="wikigeneratedid" id="H-2" %) 210 210 211 211 )))|((( ... ... @@ -214,18 +214,20 @@ 214 214 ))) 215 215 |((( 216 216 **Forwarding of confidential data** 217 -)))|( % style="width:283px" %)(((223 +)))|((( 218 218 N 219 -)))|( % style="width:369px" %)(((225 +)))|((( 220 220 CONF_REDIST: (Observation, Conditional) 227 + 228 + 221 221 )))|CONF_REDIST may represent multiple organisations 222 222 |((( 223 223 (% class="wikigeneratedid" id="HEmbargo:Privilegedaccess" %) 224 - **Embargo: Privileged access**225 -)))|( % style="width:283px" %)(((232 +Embargo: Privileged access 233 +)))|((( 226 226 (% class="wikigeneratedid" id="HE" %) 227 227 E 228 -)))|( % style="width:369px" %)(((236 +)))|((( 229 229 (% class="wikigeneratedid" id="HEMBARGO_TIME28Observation2CConditional29" %) 230 230 EMBARGO_TIME (Observation, Conditional) 231 231 ... ... @@ -233,25 +233,29 @@ 233 233 )))|Only the observations with an EMBARGO_TIME attribute are embargoed. After the embargo time elapses, the data are free for publication (equivalent to F status). 234 234 |((( 235 235 (% class="wikigeneratedid" id="HEmbargo:Privilegedaccesswithforwarding" %) 236 - **Embargo: Privileged access with forwarding**237 -)))|( % style="width:283px" %)(((244 +Embargo: Privileged access with forwarding 245 +)))|((( 238 238 (% class="wikigeneratedid" id="HE-1" %) 239 239 E 240 -)))|( % style="width:369px" %)(((248 +)))|((( 241 241 EMBARGO_TIME (Observation, Conditional) 250 + 251 +(% class="wikigeneratedid" id="HCONF_REDIST:28Observation2CConditional29" %) 242 242 CONF_REDIST: (Observation, Conditional) 243 243 )))|((( 244 244 (% class="wikigeneratedid" id="HOnlytheobservationswithanEMBARGO_TIMEattributeareembargoed.Aftertheembargotimeelapses2Cthedataarefreeforpublication28equivalenttoFstatus29." %) 245 245 Only the observations with an EMBARGO_TIME attribute are embargoed. After the embargo time elapses, the data are free for publication (equivalent to F status). 256 + 257 +(% class="wikigeneratedid" id="HCONF_REDISTmayrepresentmultipleorganisations" %) 246 246 CONF_REDIST may represent multiple organisations 247 247 ))) 248 248 |((( 249 249 (% class="wikigeneratedid" id="HEmbargo:Frontloading" %) 250 - **Embargo: Frontloading**251 -)))|( % style="width:283px" %)(((262 +Embargo: Frontloading 263 +)))|((( 252 252 (% class="wikigeneratedid" id="HSettotherequiredconfidentialitystatusaftertheembargotimeelapses." %) 253 253 Set to the required confidentiality status after the embargo time elapses. 254 -)))|( % style="width:369px" %)(((266 +)))|((( 255 255 (% class="wikigeneratedid" id="H3CHeader5CEmbargoDate3E:5Btimestamp5D" %) 256 256 <Header\EmbargoDate>: [timestamp] 257 257 ... ... @@ -262,4 +262,5 @@ 262 262 263 263 ---- 264 264 277 + 265 265 {{putFootnotes/}}