Data policy

Classifications are Public, Internal, Restricted, Sensitive and Prohibited. Sensitive datasets need a privacy review before they can be approved. Prohibited content is rejected.

Creators confirm ownership, permission or another lawful basis. Public availability is not a licence.

Samples are the only bytes released through download grants. Full media stays unstored while object storage is not connected.

Purpose limitation and minimisation apply to collection tasks. A field that is not required for the stated purpose should not be on the form.