Managing Data Sharing and Privacy

MariMap uses separate privacy controls so teams can make clear, auditable decisions.

The three controls

• Public visibility: controls whether organizations, projects, and sites can appear on public pages and public APIs.
• Regional aggregation sharing: controls whether your organization can contribute to anonymized cross-organization statistics.
• AI training consent: controls whether your organization allows AI training and model improvement workflows.

Required policy statement

Private data is not visible publicly, but may be included in anonymized regional statistics if your organization opts in to aggregation sharing.

FPIC and data sovereignty safeguards

• Do not opt in to aggregation sharing until rights and governance requirements are confirmed.
• Record data sovereignty and FPIC status in project metadata.
• Re-check consent when governance status changes.

Operational checklist

1. Set default visibility for new projects and sites.
2. Set regional aggregation consent at the organization level.
3. Set AI training consent separately.
4. Review consent artifacts before disclosures or exports.

Related guides

• TNFD & CSRD Reporting Workflow
• FPIC and Data Sovereignty