Instructions: Data Stewards will review a request for data collection and endorse responses to each question. If the request does not provide answers to questions, reviewers give an r- and point to the questions that can’t be answered.
-
Is there or will there be documentation that describes the schema for the ultimate data set in a public, complete, and accurate way? (see here, here, and here for examples). Refer to the appendix for "documentation" if more detail about documentation standards is needed.
-
Is there a control mechanism that allows the user to turn the data collection on and off? (Note, for data collection not needed for security purposes, Mozilla provides such a control mechanism) Provide details as to the control mechanism available.
If the answer to either of the first two questions is no, reviewers give an r-. Incremental changes to measurements or systems that have previously gone through analysis review may not require additional review.
-
If the request is for permanent data collection, is there someone who will monitor the data over time?
-
Using the category system of data types on the Mozilla wiki, what collection type of data do the requested measurements fall under?
-
Is the data collection request for default-on or default-off?
-
Does the instrumentation include the addition of any new identifiers (whether anonymous or otherwise; e.g., username, random IDs, etc. See the appendix for more details)?
-
Is the data collection covered by the existing Firefox privacy notice? If unsure: escalate to legal if:
-
The data includes new identifiers; OR
-
The data falls within the Web activity category AND is default-on.
-
Does there need to be a check-in in the future to determine whether to renew the data? (Yes/No) (If yes, set a todo reminder or file a bug if appropriate)**
-
Does the data collection use a third-party collection tool? If yes, escalate to legal.