Short answer

Incorporate the principles of the Five Safes framework into the design process for any system or product that handles confidential data, ensuring that controls are in place for projects, people, products, settings, and the data itself.

Field
User-Centred Design
Source
Journal of Privacy and Confidentiality (2023)
Method
Literature Review and Framework Analysis
Evidence
Strong effect

The Five Safes framework provides a robust, user-centric model for managing confidential data by focusing on the controls surrounding data access and use. This user-centred design research insight is drawn from a 2023 study published in Journal of Privacy and Confidentiality. Using Literature review and framework analysis, researchers explored how this design variable affects real-world outcomes. The key design takeaway: Incorporate the principles of the Five Safes framework into the design process for any system or product that handles confidential data, ensuring that controls are in place for projects, people, products, settings, and the data itself.

Study
User-Centred DesignRecentStrong effect

The Five Safes Framework: A User-Centred Approach to Data Governance

The Five Safes framework provides a robust, user-centric model for managing confidential data by focusing on the controls surrounding data access and use.

Journal of Privacy and Confidentiality · 2023

01

Key Findings

  • 01The Five Safes framework has become a widely adopted standard for confidential data governance.
  • 02The framework's effectiveness is rooted in its focus on controlling data access and use through five key areas: Safe Projects, Safe People, Safe Products, Safe Settings, and Safe Data.
  • 03Modern data management principles and evolving privacy concerns necessitate ongoing adaptation and potential extension of the framework.
  • 04There is a strong concordance between the Five Safes and principles-based regulation, suggesting a future consensus on data governance design models.
02

Application

Design takeaway

Incorporate the principles of the Five Safes framework into the design process for any system or product that handles confidential data, ensuring that controls are in place for projects, people, products, settings, and the data itself.

How to apply

When designing a new application or system that will handle personal or confidential information, map out how each of the Five Safes will be addressed in the design and implementation.

Project actions

  • 01When designing a system, consider who will use it (Safe People), what they will use it for (Safe Projects), what they will see (Safe Products), where they will use it (Safe Settings), and how the data itself is protected (Safe Data).
  • 02Use the Five Safes as a checklist to ensure all aspects of data security and privacy are considered in your design.
03

Method & Evidence

AimHow can the Five Safes framework be adapted and enhanced to meet the evolving challenges of modern data governance and user privacy?
MethodLiterature Review and Framework Analysis
ProcedureThe research involved a comprehensive review of existing literature on the Five Safes framework, tracing its historical development, analyzing its applications across various sectors, and identifying its strengths and limitations. The study also explored recent suggestions for framework enhancements and its alignment with emerging principles-based regulatory approaches.
ContextData governance, privacy, and information security across public and private sectors.

Variables

IVAdherence to specific 'Safes' within the framework (e.g., strictness of 'Safe People' controls).
DVPerceived data security, user trust, usability of the data access system.
CVType of data being accessed, user role, general technological literacy.
04

Strengths & Limitations

Strengths

  • +Provides a comprehensive and structured approach to data governance.
  • +Adaptable across various sectors and data types.

Limitations

The practical implementation of all five safes can be complex and resource-intensive, potentially posing challenges for smaller design projects or teams with limited expertise in data security.

Reliability & validity

Reliability could be assessed by having multiple experts evaluate the application of the Five Safes to a given design. Validity would be strengthened by comparing user perceptions of security and usability across different implementations of the framework.

Think critically

How might the increasing prevalence of cloud computing and remote work impact the 'Safe Settings' aspect of the Five Safes framework, and what design adaptations might be necessary?

05

Design Principles

"Data governance should be designed with layered controls that address the project, the user, the output, the environment, and the data itself to ensure confidentiality and privacy."

This framework is crucial for designers and engineers working with sensitive information, as it offers a structured approach to ensuring data privacy and security. By understanding and applying its principles, design teams can build trust with users and stakeholders, mitigating risks associated with data breaches and misuse.

06

What This Means for Your Design

Think of the Five Safes like a security system for secret information. It's about making sure only the right people can see and use the information, in the right way, for the right reasons, and in the right place.

How to use in your project

  • 1.Reference the Five Safes framework when discussing the ethical considerations and data security measures implemented in your design project.
  • 2.Use it to justify the design choices made to protect user data and ensure confidentiality.
07

Add to My Project

08

Quick Cite

Paragraph starter

The design of this project has been informed by the principles of the Five Safes framework, a widely recognized approach to confidential data governance. This framework ensures that data is protected by considering Safe Projects, Safe People, Safe Products, Safe Settings, and Safe Data. By addressing each of these elements, the design aims to uphold user privacy and data confidentiality.

09

Source

Journal of Privacy and Confidentiality

The present and future of the Five Safes framework

journal · 2023

View source

Questions About This Research

What does the research say about the five safes framework: a user-centred approach to data governance?
Incorporate the principles of the Five Safes framework into the design process for any system or product that handles confidential data, ensuring that controls are in place for projects, people, products, settings, and the data itself. Evidence: Journal of Privacy and Confidentiality (2023).
Why does "The Five Safes Framework: A User-Centred Approach to Data Governance" matter for design?
This framework is crucial for designers and engineers working with sensitive information, as it offers a structured approach to ensuring data privacy and security. By understanding and applying its principles, design teams can build trust with users and stakeholders, mitigating risks associated with data breaches and misuse.
How can designers apply this research?
Incorporate the principles of the Five Safes framework into the design process for any system or product that handles confidential data, ensuring that controls are in place for projects, people, products, settings, and the data itself.
What were the main findings?
The Five Safes framework has become a widely adopted standard for confidential data governance.. The framework's effectiveness is rooted in its focus on controlling data access and use through five key areas: Safe Projects, Safe People, Safe Products, Safe Settings, and Safe Data.. Modern data management principles and evolving privacy concerns necessitate ongoing adaptation and potential extension of the framework.. There is a strong concordance between the Five Safes and principles-based regulation, suggesting a future consensus on data governance design models.
What research method was used?
Literature Review and Framework Analysis.
How strong is the evidence?
Evidence strength is rated Strong effect, based on a 2023 journal from Journal of Privacy and Confidentiality.
What should I do differently in my next project?
When designing a new application or system that will handle personal or confidential information, map out how each of the Five Safes will be addressed in the design and implementation.
What are the limitations?
The framework's effectiveness can be dependent on the rigor of its implementation and may require specific expertise to apply correctly. Its adaptability to highly novel or rapidly evolving data types may also be a consideration.