GRF · Health and Biosecurity Governance
Health data and rights
Health emergencies run on data: case reports, genomic sequences, mobility data and health records. Sharing them quickly saves lives, and misuse can harm people and countries. Health data governance sets who shares what, under what consent and privacy rules, and how benefits from shared samples and sequences are distributed. This page sets out the mechanisms, records and decision holders.
Health data and rights in seven parts.
- 01The questionHealth data and rights: how the risk develops
- 02IndicatorsWhat is measured, and how well
- 03SourcesWhere the evidence comes from
- 04DecisionsWho decides, and what the evidence serves
- 05Core questionsWhat experts ask
- 06MechanismsMechanisms and drivers
- 07Methods and dataHow it is studied, and where the methods stop
Health data and rights: how the risk develops.
Information safeguards and trust. The dossier below sets out how the risk develops, what is measured, where the data come from, how it is modelled and who decides.
Privacy and speed conflict
Emergency data sharing pushes against consent and data protection rules. Clear emergency provisions and safeguards decide whether sharing is lawful and trusted.
Sharing without benefit erodes trust
Countries that share pathogen samples and sequences may see vaccines developed from them priced out of reach. Benefit-sharing arrangements address this, and their absence slows future sharing.
Systems do not interoperate
Surveillance, laboratory and hospital systems use different standards. Manual reporting and incompatible formats delay the picture authorities need.
Surveillance can outlast emergencies
Tracking tools introduced for an emergency can persist and be repurposed. Sunset clauses and purpose limits decide whether they end.
Countermeasure supply governance.
The screen a team would use to follow this subject: its measures, states and decisions. Names are examples and values are illustrative.
Countermeasure supply governance
Health data and rights · Supply coordination cell · Quarter 3
Countermeasures
| Antivirals | 6 | In place | Priority groups |
| Diagnostics | 4 | Renewing | By positivity |
| Protective equipment | 16 | In place | By facility tier |
Allocation principle
- Basis
- need and risk
- Equity check
- Done
- Decision
- Ministry of health
- Record
- published
What is measured, and how well.
Each indicator carries its unit, its cadence, the kind of source behind it and the evidence label a value would carry. No values are shown: a programme supplies them under its own authority.
| Indicator | Unit | Cadence | Source type | Label |
|---|---|---|---|---|
| Genomic sequences shared publicly | count by country | continuous | GISAID and INSDC databases | REPORTED |
| Time from sample collection to sequence sharing | days | continuous | Sequence metadata | OBSERVED |
| Health data protection law with emergency provisions | yes or no | on change | Legislation | Published statistics |
| Surveillance systems using standard formats | share of reporting systems | periodic | National assessments | DECLARED |
| Emergency data measures with sunset clauses | count | per emergency | Legal records | Published statistics |
| Material transfer agreements with benefit-sharing terms | count | annual | WHO PIP Framework records | Published statistics |
Who a decision on health data and rights reaches.
The sectors a policy on health data and rights has to coordinate: a choice in one ministry lands in the others.
Signature
Health and its partners
Health gives workforce for operations to infrastructure (0.3), farm labour to food (0.3) and utility workforce to water (0.2).
W · E · I · F · H · B
- Sectors
- 4 of 6
- Relations
- 6 of 15
- Coupling
- 0.42 share of total
Strongest relations in play
- Water → Food · irrigation0.8
- Food → Health · nutrition0.7
- Infrastructure → Water · pipes, dams and treatment works0.6
- Water → Health · drinking water and sanitation0.7
Where the evidence comes from.
Named public datasets and institutional records, each with its licence class. Sources by agreement are used only under their terms and never republished.
| Source | What it gives | Licence class |
|---|---|---|
| WHO Pandemic Influenza Preparedness (PIP) Framework records | Standard material transfer agreements and benefit sharing for influenza | Free, WHO terms |
| International Nucleotide Sequence Database Collaboration | Public sequence data (GenBank, ENA, DDBJ) | Open access, terms per database |
| GISAID | Pathogen sequences shared under access agreement | Registered access under GISAID terms |
| WHO Global Strategy on Digital Health documents | Principles for digital health governance | Free, WHO terms |
| Data protection authority guidance on health emergencies | Guidance on lawful processing in emergencies | Public records, terms per authority |
How health data and rights is governed: instruments, mandates and commitments.
The instruments, mandates, actors and accountability arrangements a policymaker, diplomat or development agency works with, citing the agreements that set them. Structures follow the frameworks named. Any state or progress drawn is illustrative, not a record.
Policy instrument matrix
The kinds of instrument available on health data and rights, by level of government and cooperation.
| Instrument type | Local | National | Regional | Global |
|---|---|---|---|---|
| Regulatory | Zoning, building codes | Laws, standards, licensing | Harmonised rules | Conventions and treaties |
| Economic | Local levies, grants | Budget lines, taxes, insurance schemes | Risk pools, regional funds | Financing mechanisms |
| Information | Local warnings | Disclosure, early warning, statistics | Data sharing arrangements | Global monitoring and reporting |
| Institutional | Local committees | Lead agencies, coordination councils | Regional bodies and secretariats | Multilateral mandates |
| Cooperative | Community agreements | Partnership compacts | Memoranda and joint programmes | Agreements and joint commitments |
Who decides, and what the evidence serves.
Health and Biosecurity Governance prepares evidence. The decisions below are taken by the authorities named, under their own rules, and never by the platform.
| Who decides | The question | Evidence this page serves |
|---|---|---|
| World Health Assembly negotiators | What the pathogen access and benefit-sharing annex provides | Comparative arrangements such as the PIP Framework and Nagoya Protocol |
| Health ministries and public health agencies | What data to collect and share, and under which safeguards | Legal frameworks and system standards |
| Data protection authorities | Whether emergency processing is lawful | Guidance and case records |
| Sequence database governing bodies | On what terms data are shared and attributed | Access policies and use records |
Outputs this topic produces
- Comparative notes on access and benefit-sharing arrangements
- Guide to lawful health data sharing in emergencies
- Dialogue briefs on surveillance sunset and purpose limits
- Questions for negotiators on pathogen access and benefit sharing
What experts ask.
The questions balance timely sharing against rights.
- What legal basis permits collection and sharing of health data in an emergency?
- How are privacy, confidentiality and security protected?
- How are pathogen genomic data and samples shared internationally, and with what benefit sharing?
- Who can access data, for what purposes and with what oversight?
- How do communities, including Indigenous peoples, exercise rights over data about them?
Mechanisms and drivers.
Public health surveillance depends on data flowing quickly from clinics and laboratories to authorities, and between countries. Legal uncertainty, incompatible systems and concerns about misuse slow that flow. Emergencies can prompt rapid expansion of data collection, such as contact-tracing tools, which raises questions about proportionality, duration and later use.
Trust is the foundation. When people believe data will be used fairly and protected, they participate in testing and surveillance; when trust is lost, participation falls. Clear rules, independent oversight, transparency and time limits are widely regarded as conditions for trust.
Why now: health data sharing frameworks are expanding, and emergencies test the balance between rapid sharing and rights. The platform is designed to convene health authorities and rights specialists on pre-agreed terms; personal health information is never needed for a governance dialogue.
How it is studied, and where the methods stop.
| Method or data | What it shows | Limits |
|---|---|---|
| Legal and regulatory analysis | Rules on collection, sharing and use | Rules vary and change across jurisdictions |
| Data governance framework comparison | How institutions govern access | Practice may differ from policy |
| Privacy and ethics review | Proportionality and safeguards of specific uses | Context-dependent judgements |
| Public attitude research | Trust and acceptability | Attitudes shift with events |
How it is studied, and what the methods cannot say.
- 01Epidemiology and public health scienceEarly outbreak parameters · Equity in outcomes · Evaluating measuresApplied here
- 02Policy, institutional and decision scienceComparing emergency health law · Tracing review recommendations · Mapping cooperationApplied here
- 03Molecular and life sciencesCountermeasure development pathways · Biosafety risk assessmentApplied here
Questions and answers.
What is pathogen access and benefit sharing?
Can health data be shared without consent in an emergency?
Why do genomic sequences matter in an outbreak?
Can emergencies justify more data collection?
What is benefit sharing?
Does the platform collect health data?
Contribute evidence from this page.
Reports is the Consortium's quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.
- EmailGateway GW-GRFSend it from this pageEvidence, a correction, a case, a method, a review, a translation or profile input. It arrives tagged with this page, so the editor who owns it receives it.
- ZenodoOpen depositDeposit it and submit to the communityPublish your own record on Zenodo with your ORCID iD, then submit it to the Reports community there. Curators review it; the DOI stays yours.
- ReportsGlobal Risks ForumSee every way to contributeThe contribution types, how each is reviewed, what credit you receive, the licence and what is never accepted.
Never send personal data, sensitive infrastructure detail or anything you have no right to share. A contribution is reviewed before use; sending it confers no authorship or editorial rights, and sponsorship never buys a finding.
Bring a governance question to the Forum.
Information and enquiries are open today. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.
Legal documents.
Show all 18 legal documents
Maps, data and figures on this site are shown for context and general information. They are not advice, forecasts or warnings; the limits of the information are set out in the Disclaimers and Data Notices.