Reconstruction Key & Repair Protocol
Use only after attempting retrieval.
Rapid recall key
- R1: Ethical handling spans obtainment/procurement, storage, management, interpretation/analysis/application and disposal; judge alignment with ethical principles and effects on people/organizations.
- R2: impact on people; potential misuse; economic value/ownership.
- R3: secure data can still harm when incomplete, inaccurate, misleading or inappropriately used.
- R4: trust/reputation, reduced misuse/decision risk, stronger stakeholder relationships, clearer ownership/sharing responsibility, human dignity.
- R5: Respect = autonomy/dignity; Beneficence = benefit/harm; Justice = equitable treatment.
- R6: Respect for Law and Public Interest.
- R7: future-oriented regulation/privacy rights; accountable controllers; privacy-conscious design; empowered individuals.
- R8: Governance establishes/oversees decision rights, standards and appropriate/necessary handling.
- R9: purpose/limitation; notice/transparency; choice/consent; access/correction; accuracy/quality; security; minimization/retention; accountability/redress.
- R10: Fairness/Lawfulness/Transparency; Purpose Limitation; Data Minimization; Accuracy; Storage Limitation; Integrity & Confidentiality; Accountability.
- R11: affirmative, freely given, specific, informed, unambiguous; rights discussed include access, rectification, portability, objection, erasure.
- R12: ownership; Right to be Forgotten; identity; freedom of speech online vs harmful behavior.
- R13: Timing; misleading visualization; definitions/invalid comparison/statistical misuse; bias; integration/transformation; obfuscation/redaction.
- R14: pre-defined result collection; biased use; hunch/search; biased sampling; context/culture.
- R15: without provenance, meaning, Metadata, quality, protection and auditable history, trust cannot be explained and harmful decisions can follow.
- R16: combination can re-identify; masking reduces exposure but is not a universal guarantee.
- R17: leadership, policy/code, principles/practices, training, controls, monitoring/audit, safe escalation/no retaliation, OCM, roadmap, Governance/legal oversight.
- R18: Population → Capture → Analysis → Results/Use; Governance sets/oversees, Legal interprets law, practitioners identify/explain/escalate.
Three-minute key highlights
- Belmont/Menlo/EDPS: Belmont provides human-subject ethical principles; Menlo adapts to ICT and adds Law/Public Interest; EDPS reinforces privacy/data-protection accountability, design and empowerment.
- GDPR practical questions: fair/lawful/transparent = can we explain/justify it? purpose = compatible use? minimization = need this much? accuracy = correct/current? storage = still need identifiable data? integrity/confidentiality = appropriately protected? accountability = can we demonstrate responsibility?
- Six risks: time window; graphical framing; meaning/population; systematic slant; provenance/meaning/history across integration; residual re-identification.
- Principle→Risk→Practice→Control: value → possible harm → expected behavior → testable enforcement.
Classification key
| ID | Best classification | Decisive clue |
|---|---|---|
| C1 | Respect for Persons | meaningful choice/autonomy |
| C2 | Beneficence | avoidable harm vs benefit |
| C3 | Justice | disproportionate group treatment |
| C4 | Misleading visualization | graphical scale/framing |
| C5 | Invalid comparison | populations/definitions not like-for-like |
| C6 | Bias — hunch and search | search/filtering confirms belief |
| C7 | Transformation/integration | origin/meaning/lineage/history unknown |
| C8 | Obfuscation/redaction | re-identification after identifiers removed |
| C9 | Ethical-culture failure | values without practices/controls/training/escalation |
| C10 | Governance + Legal + practitioner responsibility | no prohibition does not end ethical review |
Compression checkpoints
5-minute answer: ethics beyond law; people/misuse/value; Belmont + Menlo; privacy themes; online issues; six risks and five bias mechanisms; culture; Principle→Risk→Practice→Control; four checkpoints; Governance/Legal/practitioner roles.
2-minute skeleton: Responsible handling asks whether use is defensible for people and purpose, not merely legal. Apply ethical principles, recurring privacy logic and six handling-risk patterns; operationalize through culture, controls and Governance.
30-second professional rule: Before consequential data use, ask whether purpose, people impact, fairness, privacy, quality/meaning/provenance, disclosure risk and oversight are defensible — and make controls/accountability visible.
Changed-fact answers
- Respect for Persons.
- Timing.
- Re-identification risk is reduced; Governance still considers purpose, access/use, sensitivity, downstream combination and contextual safeguards.
- Data Quality.
- Control.
- No. Governance review does not eliminate practitioner responsibility; hiding fairness risk violates the organization-wide duty.
Repair protocol
- Knowledge gap: reread only the relevant source section; close it; explain from memory; create a new example.
- Principle confusion: classify changed-fact Respect vs Beneficence vs Justice cases.
- Privacy-theme confusion: ask the management question — purpose? amount? accuracy? retention? protection? accountability? — instead of memorizing labels alone.
- Risk-pattern confusion: identify the mechanism — time, graphic, definition, bias, provenance or re-identification.
- Role confusion: separate Governance oversight, Legal interpretation and practitioner duty.
- Confidently wrong: mark high priority for spaced retest because confidence can hide a durable misconception.
Source boundary: DAMA-DMBOK2 Revised Chapter 2, pp. 51–67. Compressed labels are Mastery Lab study aids unless explicitly named by DAMA.