Data about Aboriginal and Torres Strait Islander peoples has been collected by governments and institutions for generations, yet the communities it describes rarely control how it is gathered, interpreted or shared. Indigenous Data Sovereignty offers community organisations a way to reclaim that control and treat data as a genuine cultural and economic asset.
Moving Beyond Mainstream Data Collection Methods
Conventional data systems were not designed with Aboriginal and Torres Strait Islander communities in mind. Understanding why they fall short is the first step towards building something more useful and respectful.
The Problem with BADDR Data Frameworks
Researchers describe much official data as BADDR data, meaning it is Blaming, Aggregate, Decontextualised, Deficit and Restricted. It measures disparity, disadvantage and dysfunction while overlooking culture, resilience and community strength. Data framed this way tells a story of deficit rather than reality, and for community organisations, it offers little to support planning, service delivery, or self-determination.
Reclaiming Narrative Control Through Governance
Indigenous Data Sovereignty affirms the right of Aboriginal and Torres Strait Islander peoples to govern the collection, ownership and use of data about their communities. This right applies regardless of where the data is held or by whom. Reclaiming narrative control means shifting from being the object of study to holding authority over data, so that information reflects lived realities and community priorities.
Practical Frameworks for Indigenous Data Governance
Principles are only useful when they can be applied. Two established frameworks help community organisations put Indigenous data governance into everyday practice.
Applying the CARE Principles
The CARE Principles for Indigenous Data Governance set out four commitments. These are Collective Benefit, Authority to Control, Responsibility and Ethics. Developed through the Global Indigenous Data Alliance, the framework asks whether a dataset benefits the community it describes, whether that community holds authority over it and whether its use is responsible and ethical. For community organisations, the CARE Principles provide a clear checklist for every data decision.
Aligning CARE with Existing FAIR Standards
Many institutions already follow the FAIR principles, which make data Findable, Accessible, Interoperable and Reusable. FAIR was built for open science rather than Indigenous rights, and it says nothing about who benefits or who decides. CARE was designed to complement FAIR, not replace it. The goal of sound Indigenous data governance is to apply FAIR and CARE together, pairing technical openness with cultural accountability.
Safeguards for Open Data and Emerging Technologies
Open Data policies encourage governments to release publicly held information for reuse. Without safeguards, that openness can magnify the very deficit narratives communities are working to change.
Mitigating Risks in Public Data Sharing
Aboriginal and Torres Strait Islander peoples are overrepresented in datasets that measure disadvantage, so they are also overrepresented when that data is opened, linked and analysed. Releasing such data without consent or context risks entrenching harm rather than solving policy problems. Sensible safeguards include Indigenous representation at the decision-making table, clear consent protocols and governance agreements that travel with the data wherever it goes.
Traditional Knowledge Labels and Consent Protocols
Traditional Knowledge Labels, developed through the Local Contexts initiative, give communities a way to attach their own protocols to digital data and cultural material. A Label can signal attribution requirements, access conditions or restrictions on use, embedding community rules directly into data systems. When paired with informed consent processes, these Labels help ensure that emerging technologies respect cultural authority rather than override it.
Strengthening Community Data Infrastructure
Governance frameworks need secure, well-managed systems to stand on. Strong infrastructure enables community organisations to store and protect their own data with confidence.
Security Standards for Indigenous Data Assets
Treating data as a cultural asset means protecting it to a professional standard. Recognised benchmarks such as ISO 27001 for information security and ISO 9001 for quality management give community organisations assurance that their systems are maintained properly. Cybersecurity, secure cloud storage and reliable managed IT are essential foundations for Indigenous data governance, not optional extras.
Danjoo Business Solutions and the Kali Program
Danjoo Business Solutions is a majority Aboriginal-owned, end-to-end IT provider with deep roots in the Aboriginal and Torres Strait Islander sector. Holding ISO 27001, ISO 9001 and Supply Nation certification, the company helps organisations build data infrastructure that meets both technical and cultural expectations. Through the Kali Program, Danjoo reinvests one per cent of revenue back into community, repurposes and donates devices, and supports young people into technology careers.
Taking the Next Step in Data Governance
Indigenous Data Sovereignty is not a distant ideal. It is a set of rights and practical tools that community organisations can begin applying today, from adopting the CARE Principles to strengthening the systems that hold their data. Getting this right protects communities from harm and turns data into a resource for self-determination. If your organisation is thinking about how to govern its data with both cultural integrity and technical strength, we would welcome a conversation.