7. Archiving takes into account rights, permissions and restrictions
(
)
Statement Archiving respects legal restrictions to reuse information and ensures that information is accessible only when appropriate rights and permissions are in place. Rational There can be several different reasons why archived information not made publicly and freely accessible. In many cases, the restrictions fall into the categories of Intellectual Property Rights (IPR) and personal information (GDPR). Elsewhere, trade secrets and confidentiality can be relevant. Regardless of which restrictions apply, archiving has to ensure that the information containing restrictions is correctly identified and appropriate access mechanisms are in place. Implications – Archiving has to ensure that its setup is sufficient and appropriate to the level of restrictions applicable to the information. – In most cases, a security policy, governance processes and actors will be required; this must be capable of both avoiding compromises and reducing liabilities. – Legislation that poses reasons for restricting information or prescribes methods for providing access can change over time. Archiving has to ensure that its processes regarding managing access rights and restrictions and appropriate metadata can be updated whenever necessary. – In addition to the legally defined right, permissions, and restriction, an archive must also consider the ethical aspects, such as if sharing information might damage the human rights of those who have a stake in the information itself. Notes (if any)