Building Secure Foundations: Minimal Case Reporting in the SIVBG Project

In humanitarian and support systems, the balance between providing immediate help and safeguarding sensitive information is critical. When dealing with vulnerable populations, particularly in cases of violence, the initial data collection process must prioritize privacy and safety above all else. This was the driving philosophy behind a recent enhancement to the SIVBG Project: the introduction of a minimal case reporting feature.

The Challenge: Sensitive Data, Immediate Need

The SIVBG Project aims to facilitate support for survivors of violence based on gender (VBG). A core component is the ability to report cases. However, traditional reporting mechanisms often demand a wealth of personal information upfront, which can be a significant barrier for survivors already in distress or danger. Our challenge was to create a pathway for initial case creation that was non-intrusive, secure, and focused solely on the immediate needs and safety assessment, deferring detailed personal data collection until consent is explicitly given.

Introducing Minimal Case Reporting

To address this, we implemented a new POST /api/cases endpoint within our NestJS backend. This endpoint is designed to create a basic case record without collecting any nominative data (like names, addresses, or phone numbers) at the initial stage. Key aspects of this implementation include:

• Public Reference Generation: Each new case is assigned a unique, publicly traceable reference in the format SIVBG-YYYYMMDD-XXXXXX. This allows for referencing the case without revealing any personal identifiers.
• Initial Risk Assessment: The system automatically calculates an initial risk level based on the minimal information provided, helping responders prioritize and understand the immediate danger.
• Consent-Driven Orientations: Critical support orientations (e.g., social, medical, legal) are only generated and associated with the case once the survivor explicitly provides consent. This ensures that their journey through the support system is entirely within their control.
• Robust Auditing: Every case creation is meticulously logged in AccessAudit, ensuring accountability and transparency regarding who initiated a report and when.

This approach allows us to establish a preliminary record and initiate a response pathway while respecting the survivor's autonomy and minimizing their data exposure.

Frontend Experience: A Privacy-First Form

On the frontend, powered by React, we developed a minimal reporting form. This form is intentionally streamlined, collecting only essential, non-identifying information:

interface MinimalCaseReport {
  entryChannel: 'online' | 'phone' | 'in-person';
  safeContactMethod: string; // e.g., 'email', 'whatsapp', 'none'
  immediateDanger: boolean;
  isMinor: boolean;
  medicalNeeds: boolean;
  legalNeeds: boolean;
  consentGiven: boolean;
}

// Simplified React Component Snippet
const MinimalReportForm: React.FC = () => {
  const [formData, setFormData] = useState<MinimalCaseReport>(/* initial state */);

  const handleSubmit = async (event: React.FormEvent) => {
    event.preventDefault();
    try {
      const response = await fetch('/api/cases', {
        method: 'POST',
        headers: { 'Content-Type': 'application/json' },
        body: JSON.stringify(formData),
      });
      if (response.ok) {
        // Handle success, maybe show public reference
      } else {
        // Handle error
      }
    } catch (error) {
      console.error('Error submitting form:', error);
    }
  };

  return (
    <form onSubmit={handleSubmit}>
      {/* Form fields for entryChannel, safeContactMethod, etc. */}
      <input type="checkbox" name="consentGiven" checked={formData.consentGiven} onChange={/* handler */} />
      <label htmlFor="consentGiven">I consent to basic information processing.</label>
      <button type="submit">Report Case</button>
    </form>
  );
};

The form explicitly avoids fields for narrative details, names, phone numbers, or addresses at this initial stage. This design reinforces our commitment to a "privacy-by-design" principle, ensuring that sensitive personal data is only collected when absolutely necessary and with clear, informed consent.

Impact and Future

This minimal case reporting feature marks a significant step for the SIVBG Project. It establishes a secure, empathetic entry point for survivors to seek help, addressing the critical balance between immediate support and long-term privacy. By providing a low-barrier, high-security initial report, we can begin to offer support without burdening or compromising the survivor. Future work will build upon this foundation, enabling more comprehensive case management and consultation, always with survivor safety and data protection at the forefront.

Generated with Gitvlg.com