As OCHA and its partners process increasingly large volumes of data, we also face more complex challenges related to assessing and managing data risk. Many organizations have developed policies focused on personal data, but guidance on the management of other forms of sensitive data has been lacking. The Working Draft of the OCHA Data Responsibility Guidelines (‘the Guidelines’) aim to help fill this gap.