Course: Digital Development Ethics 101 Module: Consent, Power, and Data Sovereignty Duration: 75-90 minutes Format: Participatory design workshop with policy analysis
Learning Objectives
Understand meaningful consent in low-resource and low-literacy contexts
Analyze power imbalances in data collection for development
Design ethical data practices that center community control
Evaluate data protection policies from a Global South perspective
Key Concepts
Consent Challenges in Development Contexts:
Conditional Consent: When basic services are tied to data sharing, making consent effectively mandatory. Example: Linking Aadhaar to PDS rations.
Literacy Barriers: Complex privacy policies that assume high literacy and technical understanding. Example: 20-page terms of service for a basic health app.
Power Imbalances: Vast differences in power between data collectors (NGOs, governments, companies) and data subjects (beneficiaries, patients, citizens).
Cultural Context: Individual consent models that don't account for collective decision-making traditions in South Asian communities.
Case Study: Health Data Collection in Rural Rajasthan
Scenario: An NGO is digitizing health records for primary health centers in rural Rajasthan, partnering with a health tech company to create predictive models for disease prevention. The project involves collecting detailed health data from patients, including pregnancy records, family medical history, and lifestyle information.
Stakeholders and Power Dynamics:
Patients: Mostly women, many illiterate, dependent on public health system
Health workers (ASHAs): Trusted community members but under pressure to meet data collection targets
NGO: Committed to improving health outcomes but also to demonstrating impact to donors
Tech company: Interested in developing commercially viable health AI products
Government: Wants to improve health metrics and potentially integrate data with national health systems
Ethical Considerations:
Informed consent challenges: How to explain complex data uses to illiterate patients?
Family vs. individual consent: Should husbands/mothers-in-law consent for women's health data?
Data sharing boundaries: What happens when government requests access for policy purposes?
Commercial use concerns: Can health tech companies profit from data collected through NGO programs?
Long-term data control: Who owns the data as the project evolves?
Questions for Analysis
What constitutes "informed" consent when patients have limited understanding of data analysis and AI?
How do gender and social hierarchies affect consent processes? Should individual or family consent take precedence?
What are the risks and benefits of linking this data with government health systems?
How can communities retain meaningful control over their health data as it becomes more valuable?
What consent mechanisms work when the same data might be used for immediate care, research, and commercial product development?
Activity: Consent Design Workshop
Challenge: Design a comprehensive consent process for a digital maternal health program targeting first-time mothers in rural Bangladesh. The program will collect pregnancy health data, provide personalized advice, and share anonymized data for research.
Design Considerations:
Multiple stakeholders: Pregnant women, husbands, mothers-in-law, health workers
Literacy levels: Mix of literate and illiterate participants
Language diversity: Multiple local languages and dialects
Ongoing consent: Pregnancy is a 9-month journey with changing circumstances
Data use evolution: Research findings might lead to new data applications
Design Requirements to Address:
Visual Consent Tools: How will you explain data use through images, diagrams, or videos for non-literate participants?
Community Consultation: What role should village councils, women's groups, or religious leaders play in the consent process?
Regular Consent Review: How often should consent be revisited? What triggers re-consent requirements?
Clear Benefit Explanation: How will you communicate what participants gain vs. what researchers/companies gain?
Withdrawal Mechanisms: How can participants opt out? What happens to their data when they withdraw?
Group Exercise (30 minutes):
Working in teams of 4-5, create:
A visual consent flowchart showing decision points and stakeholder involvement
Sample consent language in simple, culturally appropriate terms
A data governance structure that gives communities ongoing control
Conflict resolution process for when different stakeholders disagree
Data Justice Framework
Principles for Ethical Data Practice:
1. Data Sovereignty: Communities and individuals retain ultimate control over data about them, including decisions about collection, use, sharing, and deletion.
2. Transparency: Clear, accessible explanation of how data is collected, processed, stored, and used, with regular reporting back to communities.
3. Accountability: Clear mechanisms for redress when data practices cause harm, including accessible complaint processes and meaningful remedies.
4. Equity: Fair distribution of both benefits and risks from data use, with particular attention to not amplifying existing inequalities.
5. Participation: Meaningful community involvement in designing data collection and use, not just in consenting to predetermined practices.
Policy Analysis Exercise
Compare Data Protection Approaches:
India: Digital Personal Data Protection Act 2023
Strengths: Consent requirements, data localization provisions, children's data protection
Gaps: Limited provisions for collective consent, weak enforcement mechanisms
Development context: Unclear how it applies to NGO data collection and development programs
Kenya: Data Protection Act 2019
Strengths: Explicit provisions for vulnerable populations, data subject rights
Gaps: Implementation challenges, limited resources for enforcement
Development context: More explicit consideration of development and humanitarian contexts
Ghana: Data Protection Act 2012
Strengths: Early adoption in Africa, sector-specific guidelines
Gaps: Pre-digital economy, needs updating for current technologies
Development context: Limited consideration of development data collection
Brazil: Lei Geral de Proteção de Dados (LGPD)
Strengths: Comprehensive rights framework, legitimate interest provisions
Gaps: Complex compliance requirements may burden smaller organizations
Development context: Some consideration of public interest uses
Discussion Points:
How do these laws address development contexts and power imbalances?
What gaps exist for protecting marginalized populations?
How can enforcement be strengthened in resource-constrained environments?
What role should international development funders play in ensuring data protection?
Real-World Examples
Good Practices:
Slum mapping in Mumbai: Community-controlled data collection where residents decide what information to share
Women's health records in Tamil Nadu: Data held by women's self-help groups rather than external organizations
Agricultural data cooperatives: Farmers collectively negotiate terms with agtech companies
Concerning Practices:
Biometric data collection: Mandatory for welfare access without clear consent processes
Health data commercialization: NGO health data sold to pharmaceutical companies without patient knowledge
Educational surveillance: Student data collected for learning analytics shared with EdTech companies
Tools for Ethical Data Practice
Data Impact Assessments: Systematic evaluation of risks and benefits before data collection
Community Data Agreements: Collectively negotiated terms for data use
Data Trusts: Independent organizations managing data on behalf of communities
Consent Management Platforms: Technical tools for managing complex, ongoing consent
Participatory Data Design: Involving communities in designing data collection from the start
Final Reflection Questions
Power and Choice: Can consent ever be truly "free" when basic services depend on data sharing? How do we address this structural challenge?
Individual vs. Collective: How should data protection balance individual privacy rights with collective community interests?
Global Standards: Should data protection standards be universal, or should they reflect local cultural values and practices?
Development Trade-offs: How do we balance data protection with the potential benefits of data-driven development programs?
Future Generations: What responsibilities do we have for data that might be used in ways we can't currently imagine?
Assignment Options
Consent Process Design: Create a complete consent framework for a specific development program, including visual materials and community engagement processes.
Policy Gap Analysis: Analyze how well your country's data protection law addresses development contexts and propose specific amendments.
Community Data Audit: Work with a local organization to assess their current data practices and recommend improvements.
Cross-Cultural Consent Study: Research how consent concepts vary across different cultural contexts in South Asia and implications for data governance.
Further Reading & Resources
Academic: Ricaurte, P. (2019). "Data Epistemologies, The Coloniality of Knowledge, and Resistance"
Policy: Global Partnership for Sustainable Development Data - "Data Values and Principles"
Practical: Engine Room's "Responsible Data Handbook"
Legal: Privacy International reports on Global South data protection
Community Organizing: Our Data Bodies project on community data rights
Organizations Working on Data Justice
India: Internet Freedom Foundation, Digital Empowerment Foundation
Pakistan: Digital Rights Foundation, Bytes for All
Regional: IT for Change, Association for Progressive Communications
Global: Algorithm Watch, Privacy International, Electronic Frontier Foundation
Digital Development Ethics 101 | ImpactMojo Knowledge Series
Licensed under CC BY-NC-ND 4.0 | For educational use with attribution
Part of the OpenStacks initiative for development education
