confidentiality Duty and practice of ensuring that personal or sensitive information only flows from one entity to another according to legislated or otherwise broadly accepted norms and policies. This can be done by either restricting access to the data or certain variables in the data, and/or by protecting personal or sensitive information using an anonymisation method. https://orcid.org/0000-0002-5214-4466 https://orcid.org/0000-0003-2687-1982 data stewardship technical concept