What it means
Secondary use governance controls whether data collected for one purpose may be reused for analytics, targeting, model development, research, sharing, or another objective.
Why it matters
Data availability can be mistaken for permission, especially when new uses change expected context, increase inference, or combine datasets in ways people did not anticipate.
Practical focus
- Require a documented new purpose, compatibility or legal analysis, data and population scope, benefit, risk, and accountable approval.
- Apply minimization, separation, access, de-identification, retention, notice, consent, opt-out, and downstream-use controls appropriate to the new context.
- Monitor actual queries, models, exports, recipients, and derived outputs against approved conditions.
- Preserve this evidence: Retain the secondary-use request, purpose analysis, data map, risk assessment, approvals, safeguards, notices or choices, monitoring, and expiry.
- Exercise this failure scenario: A dataset collected for service delivery is quietly repurposed for profiling or model training without renewed analysis, controls, or transparency.
Common mistakes
- Using the label Secondary Use Governance without defining scope, ownership, decision authority, and the exact data, systems, people, or process affected.
- Treating a policy, contract, diagram, dashboard, or tool demonstration as proof that Secondary Use Governance operates consistently in production.
- Closing work without retaining the evidence needed to reconstruct the decision and verify the intended control outcome.
- Testing only the normal path and never rehearsing the failure condition: A dataset collected for service delivery is quietly repurposed for profiling or model training without renewed analysis, controls, or transparency.
Certification relevance
This subject appears in or supports the following certification bodies of knowledge: