A Login Does Not Answer the Publication Question
Being able to open a file establishes a technical capability. It does not by itself establish which purposes, recipients or later uses are permitted. Treat access, internal analysis, transfer and public release as distinct questions.
The ICRC Handbook, third edition, section 2.5.2 addresses purpose and further processing: a new use needs a context-specific assessment rather than a presumption of compatibility. The OCHA/JIPS data-sharing note, December 2020, printed page 4, includes governance among the factors for sharing. These references support asking the questions below; they do not decide a real organization's legal permission.
A Fictional Request
A fictional service partner receives a restricted weekly operational report to help schedule its staff. Another colleague asks to use the report's figures and chart in a public presentation. The colleague can open the shared folder, and the presentation concerns humanitarian work. Neither fact settles the new request.
In the exercise, the original covering note permits scheduling by the named partner team. It says nothing about publication. The chart combines the provider's analysis with externally supplied background data. Its labels also reveal a service schedule. These are invented facts, not model contract terms.
| Question | Evidence to Find in the Exercise | What Remains Open |
|---|---|---|
| What purpose was authorized? | The covering note permits the named team's scheduling task | Whether a public presentation is covered |
| Who may receive the information? | The partner team is named | Whether an open audience or another organization may receive it |
| What confidentiality or safety constraints apply? | The report is marked restricted and reveals a schedule | The owner must explain the restriction and assess a public alternative |
| Who controls the requested material? | The report author assembled the chart | Which external terms apply to the background data and whether the author can permit reuse |
| What permission would resolve the request? | The relevant authorized owners must clarify the proposed content, audience and purpose | A colleague's informal reassurance is not the missing determination |
The partner asks for a public-safe summary rather than forwarding the report. The report owner might approve an independently checked, less detailed figure; might permit a particular use with conditions; or might decline. The exercise deliberately supplies no final authorization. Preserve that unresolved state rather than writing "permission assumed."
Credit and Permission Answer Different Questions
Attribution tells readers where material came from. It does not erase confidentiality, personal-data concerns or restrictive reuse terms. Conversely, permission to reuse a chart does not verify its claims, explain its denominator or establish that it is suitable for the new audience.
For a real request, identify the exact item and proposed treatment: quotation, summary, redistribution, translation, adaptation, analysis or publication. Check the actual applicable terms and ask a qualified owner where scope is unclear. A web page being publicly accessible does not mean every possible reuse is authorized. Keep rights and privacy questions separate enough that resolving one does not silently close the other.
An Adequate Clarification Request
Use concrete words: "May the named team include the attached proposed summary, covering this period and area, in this public presentation? The proposed version removes service times and the partner breakdown. Please confirm authority to permit this use, applicable attribution or other conditions, and whether external source terms require a separate check."
Attach only information the recipient is already authorized to receive. Record the response, role, version and conditions beside the working product. If the answer covers a single presentation, do not quietly treat it as permission for an open dataset or an AI upload.
When the Purpose Changes Again
A later plan to link the summary to another dataset, transfer it to a new partner or make it searchable online reopens the assessment. The result might remain the same, but it should follow a checked decision. Use the sharing decision tutorial and the data-risk screen to preserve the original scope, proposed change and responsible decision. No universal consent, contract or licensing shortcut is supplied here.