Privacy and security
Diamond requires companies to provide information about cast and crew, and filling in a Diamond survey means you can provide a range of information about yourself, including your employment and workforce experiences. Under data protection laws CDN must make sure this personal information is appropriately used and kept safe.
There will be a Diamond privacy notice with all the details of the information collection and use and your rights and choices, which will be available at launch, and that you will be able to read at any time and before filling in the survey.
​
How we keep your information safe
We use a secure platform and encrypt the survey information you provide, so even authorised platform users cannot see the survey responses.
We have created different types of users with different levels of access depending on their role. Those filling in the survey have a passwordless login with the option to have multi-factor authentication (MFA). All other platform users have a login with MFA enforced.
When you fill in the survey, the information stays on your device until the end and you submit it. Only then does the information go into the platform.
​
How we make sure your information is used appropriately
Diamond is designed so that only the person filling in the survey can see the information entered. The role-based access mentioned above makes sure that authorised platform users only see the other information they need for their role.
Broadcasters and those funding commissioning projects can only access information they have provided and get anonymised reports. Any personal information will likely be limited to contact and role information for their company’s Diamond users or production company users they invite to take part in Diamond. The data the reports are based on comes only from companies in the chain under the broadcaster. Diamond is intentionally designed to limit the personal information available to broadcasters.
Production and post-production companies can only access personal information they provide to Diamond, and get anonymised reports. Any personal information will be the cast and crew information they upload, and perceived data (production companies only). But they never see individuals’ personal information from the surveys.
Perceived data
This may be legally considered as personal information when it is about or relates to a specific, identifiable, real and living individual. Where the perceived data is about or relates to a real person, this will be their personal information. If the real person is dead, data protection law does not apply.
Where the perceived data is about or relates to a fictional character, this will not be personal information as the individual in question does not exist. Perceived data only about the themes in a programme will not be personal information.
The reports
All reports are based on aggregated and anonymous information. Diamond uses state-of-the-art techniques known as ‘differential privacy’ which reduces the risk that any one individual can be identified from the reporting data. The techniques include limits on the sample size and granularity of the underlying data, as well as mathematical techniques to add noise or randomness to the data (or to the results of queries on data). This means no single individual’s information can be identified, but the overall patterns and statistics remain accurate.
Rights and choices
The companies uploading cast and crew data have to tell these individuals about this and give them the chance to opt out. Individuals can opt back in at any time.
Individuals can also fill in the survey at any time, without waiting for an email invite.
Individuals can log into their Diamond account to manage their own information. They can edit, delete and download the information they have provided at any time. They can also choose to delink their information from an associated production. They can also delete their account.
The invite emails have an unsubscribe link for those who do not want to be contacted again.
Individuals will be able to get user support from the platform provider and can contact CDN’s Data Protection Officer at any time.