3.5 Sign data sharing agreements

Data sharing agreements are crucial for formalizing collaborations between NSOs and mobile network operators. These agreements outline the terms and conditions for data access and use, ensuring that all parties understand their rights and responsibilities. 

Key aspects of these agreements include:

  • Data ownership: Clearly define the roles of data controller and data processor, and establish clear rules for authorizing and governing data processors handling the shared data.
  • Data anonymization and aggregation: The agreement must explicitly detail the level of data anonymization and aggregation required to protect user privacy. This includes specifying which categories of data the NSO can access and how the data will be processed to remove personally identifiable information.
  • Data handling: The agreement should clearly define the responsibilities of each party in handling the data. This includes data storage, security, and analysis protocols.
  • Data use limitations: The agreement should specify that the operator data can only be used for the stated statistical purposes and prohibit its use for commercial or other unauthorized purposes by the NSO.
  • Data deletion: The agreement must outline procedures for the secure deletion or return of data to the mobile network operator upon completion of the project or as per agreed-upon timelines. Usually capped by regulation to two years or less.
  • Publishing results: The agreement should address how research findings and publications will be disseminated, including considerations for data privacy, intellectual property rights, and attribution of the data source.
  • Compliance with regulations: The agreement must ensure compliance with relevant data protection regulations, such as GDPR. This may involve establishing data processing agreements (DPAs) to further clarify data processing activities and ensure compliance with privacy laws.