Data Request from a Funder

The central issue is informed consent: the current form covers attendance, emergency contacts, and internal photographs, not disclosure of nationality, income, and employment to a funder. Collecting those data would exceed the stated purpose, and the power gap between a small organisation and a funder makes 'consent' vulnerable to being nominal. A second issue is data minimisation: names plus nationality plus income plus employment status create an identifiable and sensitive record, and the foundation has refused aggregation. A third is the photograph incident, which signals that existing consent boundaries are already being tested and that trust is fragile. A fourth is financial dependency: a grant worth 60% of the budget with four weeks of reserves creates strong pressure to accept. Stakeholders are the students, guardians, staff and volunteers, the organisation's board, the foundation, and the wider community whose trust sustains the programme.

Ranking: (1) negotiate a modified data schedule and pursue bridge funding in parallel; (2) decline the grant on these terms and protect the programme's consent standards; (3) accept the terms as written. Option 1 is best because it addresses the funder's legitimate need for accountability while reducing identifiability - for example, reporting aggregate counts by band, using coded IDs held only by the organisation, or having the funder review anonymised records on site. It also buys time. Option 2 is defensible if negotiation fails, because accepting would use students' data for a purpose their guardians never approved and could expose families to harm; the board should plan for reduced service rather than treat the grant as unavoidable. Option 3 is worst: it converts financial pressure into consent that is not freely given, and it rewards the foundation's refusal to consider safeguards. The photograph complaint should be addressed separately and promptly, whatever the funding decision.

Questions to the foundation: first, 'Will you accept a report that gives aggregate counts by income band and nationality category, with no names or guardian employment details, and allows an independent reviewer to verify the figures on site?' Second, 'If individual-level data is essential, will you accept coded records with the key held by us, a defined retention period, and a written commitment not to use the data for immigration or law-enforcement purposes?' If both answers are no, the coordinator should not sign. The next steps are to inform the board, request a short extension, approach other funders or the local authority for bridge funding, and tell families honestly what happened with the photograph. If the programme must shrink, that is a cost to be managed transparently; it is not a reason to transfer the students' data without consent.