Data Trusts: Fiduciary stewardship as a mechanism for empowering data subjects and fostering responsible innovation

To comprehend the concept of a data trust, one must first understand its foundational legal analogue: The trust. In law, a trust is a fiduciary arrangement where one party (the settlor) transfers assets to another (the trustee), who holds and manages them for the benefit of a third party (the beneficiary). The trustee is bound by a stringent legal duty to manage these assets responsibly, with undivided loyalty and solely in the beneficiaries’ best interests.

Transposing this structure into the digital realm, a data trust becomes a governance framework for data stewardship. It is a legal and technical mechanism where data subjects (as settlors and beneficiaries) entrust their data to an independent trustee. This trustee assumes the fiduciary duty to manage that data pool impartially, prudently and transparently for the collective benefit of the subjects. As the Open Data Institute (ODI) emphasises, data trusts provide "independent, fiduciary stewardship of data". This fiduciary element is not incidental but essential; it introduces a legally enforceable obligation of loyalty and care that transcends mere data management, creating a robust foundation for trust and accountability.

Contemporary data protection regimes, such as the DPA and GDPR, establish critical standards for lawful processing. However, they primarily rely on individual consent and ex-post-facto enforcement, leaving a significant governance gap.

Individuals possess limited practical mechanisms to actively steward their data or negotiate its terms of use. Data trusts address this gap by institutionalising ongoing, proactive governance. They provide a structural solution where the burden of ensuring compliance and ethical use shifts from the isolated individual to a qualified, accountable trustee.

This model facilitates several key advantages:

• Aggregated agency and bargaining power - By pooling the data rights of many individuals, a data trust aggregates fragmented bargaining power. This enables meaningful negotiation with data users (e.g., corporations, researchers) over terms of access, benefit-sharing and permissible use, which isolated individuals cannot achieve.

• Embedded governance-by-design - A data trust is not merely a legal shell but can architect governance directly into data systems. It can mandate privacy-by-design and ethics-by-design principles within its operational framework, ensuring protection in both substance and process. The fiduciary trustee acts as a permanent guardian of these principles.

• Mitigating dual harms - Data trusts counter two prevailing market failures: the hoarding of data by powerful entities that stifles innovation, and the oversharing of data that leads to individual and collective harm. By serving as a vehicle for responsible, conditional data sharing, they can unlock data for socially beneficial purposes while enforcing strict protective guardrails.

The imperative for data trusts in the African context

The case for data trusts is particularly compelling in Africa, where unique socio-digital dynamics amplify existing power asymmetries. Relying on digital "informed consent" is often critically insufficient due to varying levels of digital and legal literacy. The act of clicking an "agree" button linked to lengthy, complex terms cannot be presumed to represent genuine understanding or autonomy. This creates a systemic risk where consent mechanisms become a procedural formality rather than a meaningful exercise of rights.

Data trusts offer a transformative alternative by institutionalising a voice and a shield for data subjects. A trusted fiduciary intermediary can interpret community interests, negotiate with sophisticated data users on equal footing, and ensure that data use aligns with local values and collective benefit. This moves governance beyond a transactional, individual-centric model toward a stewardship model that is more resilient to power imbalances.

Data trusts within the ecosystem of data institutions

It is useful to situate data trusts within the broader spectrum of data institutions, organisations that steward data on behalf of others towards public, educational, or charitable aims. Data trusts represent a specific, legally rigorous form of such an institution, distinguished by their enforceable fiduciary duty. This legal clarity makes them a potent tool for building the trust necessary to catalyse data sharing.

For Africa, fostering such responsible data stewardship is not merely a protective measure but a strategic imperative for innovation and sovereignty. Access to quality, representative data is the lifeblood of modern innovation, from training inclusive AI models to informing public policy and driving scientific research. Data trusts and similar institutions provide a governance pathway to ensure that Africa’s data can be shared and used, both domestically and in global partnerships, in ways that propel innovation while safeguarding rights and ensuring that value and leverage are retained locally.

In essence, a data trust reimagines data governance from the ground up. It replaces the vulnerable paradigm of individual consent with a resilient structure of fiduciary stewardship. By aggregating rights, instilling enforceable duties of loyalty and embedding ethical principles into data architecture, it empowers data subjects and creates the trustworthy foundations required for responsible data sharing. For Africa and beyond, data trusts are a critical governance innovation for realising the promise of data-driven progress while decisively mitigating its perils, ensuring that data serves people.