Application Procedure and Form for PSBs Seeking Anonymisation Service from the CSO

1. PSB completes application form
2. CSO meets PSB to finalise application
3. PSB signs Data Processing Contract
4. PSB supplies data to CSO
5. Dataset is designed
6. CSO anonymises dataset
7. Sign-off meeting between CSO and PSB
8. Dataset made available to PSB
9. CSO to delete the copy of the original confidential microdata file provided by the PSB

The first step for a PSB to take is to complete the 'CSO Anonymisation Service Application Form for PSB's' for the service, which includes the basic information the CSO requires to assess the level of resources needed to anonymise the dataset. The information requested includes:

• background information on requests received (to help with design of the anonymised dataset);
• a list of the variables that the PSB requests to be made available;
• the PSB's preferred data output formats;
• identification of key analysis variables;
• the number of records and
• confirmation of whether personal or sensitive commercial data is involved.

An initial meeting between the CSO and the PSB will be scheduled to finalise the application, after which the PSB will sign a standard Data Processing Contract to appoint the CSO as a processor for the service. A copy of the data that the PSB wishes to share will then be supplied to the CSO to facilitate detailed design of the anonymised dataset. A final sign-off meeting will be held to ensure that the anonymised dataset meets the PSB’s requirements, and the dataset will then be made available for onward sharing.

When a dataset has been shared by a PSB for the first time, it should be notified to the Single Information Point that it is available to be applied for as a ‘protected dataset’ and listed on the Office of the Government Chief Information Officer’s (OGCIO) designated webpage.

This form is to be used by a Public Service Body (PSB), as the data controller, when submitting a request to the Central Statistics Office (CSO), the data processor, for the service of anonymising a designated microdata file:

The service will include the following components:

• The CSO to accept a confidential microdata file from the PSB;
• The CSO to produce an Anonymised Microdata File (AMF) from the confidential microdata file;
• The CSO to provide the AMF to the PSB;
• The CSO to delete the copy of the original confidential microdata file provided by the PSB.

Please note that PSBs who decide to share data within the context of Article 7 of the EU Data Governance Act are the Data Controllers for any data, including personal data, being provided to the CSO.

The CSO, in providing the assistance referred to in Article 7 of the EU Data Governance Act, acts as a data processor under instructions of the data controller.