Developing a Data Protection Policy for The City of Hamilton

How can the City of Hamilton keep municipal data secure?

This is a full year project extending into Winter 2023 - View Results Here

Project Description:

A Data Protection Policy (DPP) is a security policy dedicated to standardizing the use, monitoring, and management of data. The main goal of this policy is to protect and secure all data consumed, managed, and stored by the organization. A DPP has been requested to be written for the City of Hamilton.

Currently, the City of Hamilton does not have a DPP. By drafting a DPP, we will demonstrate our city’s commitment to ensuring the protection and privacy of consumer data. For example:

  • If the City of Hamilton is subjected to compliance audits, or experiences a data breach, the data protection policy can be presented as an evidence demonstrating the city’s commitment to data protection principles.

  • A DPP could help to complement IT policies as well as demonstrate The City of Hamilton’s leadership in the area of Data Protection.

Phase 1: Background Research

  • Research other municipalities and/or organizations using Data Protection Policies (DPP).

  • Develop a matrix of your findings depicting the subject and the items they have included in their DPP.

  • Develop/recommend a list of requirements (i.e. data protection standards and regulations) necessary for a proper Data Protection Policy.

    • Cross reference this list with the requirements for joining the Cities Coalition for Digital Rights to ensure their priorities are captured in the DPP.

    • Review these requirements with the Project Sponsor for approval before moving to write a DPP.

Phase 2: Draft the DPP

  • Develop a draft City of Hamilton Data Protection Policy (DPP) as a starting point for discussion and consultations within the City of Hamilton

  • The Background Research and Draft DPP will be submitted to PUBPOL 701 as the final research assignment in lieu of the “Case Analysis and Policy Brief.”

Phase 3: Integrate Project Feedback

  • Integrate feedback from City partners faculty

Deliverables: Data Protection Policy, background research report

Where the work will go and what it will be used for:

A well written Data Protection Policy (DPP) can help the City of Hamilton comply with data protection standards and regulations. The City of Hamilton plays an important role in development of proactive and holistic policies to ensure that technology is used to increase both freedom and security and that the benefits of digital technology are experienced by all. The Cities Coalition for Digital Rights supports just that and promotes and defends digital rights of citizens, residents and visitors in cities and urban environments to ensure fair, inclusive, accessible and affordable non-discriminatory digital environments. The DPP is one of the requirements to join The Cities Coalition for Digital Rights.

City staff: Kelly Austen, Senior Project Manager, Digital Innovation Office

Faculty & Course: Dr. Adrienne Davidson, McMaster University, PUBPOL 701 (Public Policy Foundations I: Legislative, Regulatory and Judicial Dynamics)

Students: John Halligan and Sanchita Rajvanshi

Project Agreement