2027 Evaluating a Public Health Data Sharing Governance Process: A DrPH Applied Project Planning Guide
Co-Founder and Chief Data Scientist
A health department may have data-sharing agreements in place yet still struggle to approve requests, define who can use data, or explain decisions to community partners. For an experienced practitioner, those gaps can form a focused DrPH applied project - but only if the organization can support the evaluation and act on its findings.
This guide explains how to define the governance process, choose feasible measures, address privacy and partner authority, and assess whether a DrPH is the right route for doing the work.
Key Things You Should Know
- Evaluate a specific decision pathway - such as approving surveillance-data requests - not "data sharing" in general. Map who decides, under what authority, and how long each step takes.
- Measure governance as well as speed: examine whether decisions are documented, legally appropriate, consistent, and accountable to affected communities. Faster approval is not automatically better approval.
- Confirm project-site access, faculty supervision, data-use permissions, and the program's applied-work requirements before committing. A process map and improvement plan can be valuable even when restricted records cannot be examined.
What Is a Public Health Data Sharing Governance Process?
Data sharing governance is the set of authorities, rules, people, and records that controls how public health data are requested, released, used, protected, and retired. It includes more than the technical transfer of a file. A local health department's process might begin with a researcher's request for surveillance data and end with a documented approval, a limited-use extract, monitoring of permitted use, and eventual deletion or renewal.
The project's unit of analysis should be clear. Governance concerns who has authority and how decisions are justified; operations concerns whether staff can carry out those decisions reliably; security concerns safeguards against unauthorized access. Each can fail independently. An agreement may be legally sound, for example, while an unclear handoff leaves requests unresolved.
Students entering this work from another field may need foundational public health context before evaluating surveillance or community-data decisions. Online bachelor's study in public health is one possible starting point for someone without a prior degree; an experienced practitioner should instead identify the narrower knowledge gap before enrolling in another program.
How Does a DrPH Applied Project Evaluate Data Sharing Governance?
A DrPH project should help a real decision-maker improve a defined practice process. One feasible question is: How consistently does a health department review and document requests to share a particular surveillance dataset with external partners? That is a process evaluation, not a claim that sharing has improved population health.
Start by identifying the data steward, legal and privacy reviewers, information-technology staff, requesters, program leaders, and community or tribal authorities where applicable. With organizational permission, compare the written policy with how a small set of requests actually moved through the process. Interviews or workflow observations can explain delays that timestamps alone cannot.
The output might be a validated process map, an agreed set of measures, and a proposed escalation procedure - not a new data release.
Set boundaries early. If request logs contain identifiable information, the project may use approved, minimized fields or aggregate summaries instead. A student should not access restricted data merely because they work at the site. Staff members who need introductory preparation may find fast-paced public health bachelor's course formats relevant, but a team's training needs are separate from the DrPH student's authority to evaluate its process.
What Does CEPH Accreditation Require for a DrPH Applied Project?
The Council on Education for Public Health (CEPH) accredits public health schools and programs against degree-level criteria, including expectations for DrPH practice and integrative learning. CEPH does not prescribe a universal "data governance dissertation," a particular dataset, or one standard project format. The institution determines how a student completes and demonstrates its requirements.
Before proposing the evaluation, ask the DrPH director which requirements it may satisfy, what written products are assessed, who may supervise the work, and when site and academic approvals must be obtained. Do not assume that an employer project automatically counts as both an applied practice experience and an integrative learning experience.
Check the accreditor's directory and the school's current handbook for the exact accredited unit and degree scope. CEPH-accredited online MPH programs can provide earlier professional preparation, but an MPH listing does not establish that a separate DrPH is covered or that its project rules are identical.
Use frameworks to ask better questions, not to substitute a checklist for the site's legal and community obligations. The NIST Privacy Framework can help examine privacy-risk decisions; the NIST Cybersecurity Framework can organize security responsibilities; and CDC public health data modernization guidance provides context for interoperable, usable data. None, by itself, authorizes a disclosure.
Select the smallest combination that fits the decision. A request-approval project might use a privacy framework to examine data minimization, the agency's own policy to test decision consistency, and applicable agreements to establish permitted uses.
Relevant federal and state law, tribal governance requirements, and contractual terms take priority over a student's preferred framework. HIPAA, for example, applies according to the organization and information involved; not every public health record is governed by HIPAA in the same way.
If the main gap is introductory data literacy rather than organizational leadership, compare targeted training with low-tuition online public health degree options. The least expensive credential is not necessarily the best preparation for interpreting a specific agency's legal authority or community commitments.
The plan should tell a site sponsor what decision the evaluation will support and tell a faculty reviewer how the evidence will be obtained responsibly. Write it before requesting access to logs or interviewing staff.
A workable sequence is:
- Define the decision: Specify the dataset, requesting organizations, approval pathway, and improvement decision - for example, whether to clarify review responsibilities.
- Establish the baseline: Review approved policies and, if permitted, a defined period of request records; document missing timestamps and changes in procedure.
- Choose balanced measures: Examine time from complete request to decision alongside documented legal review, required partner consultation, reasons for denial, and follow-up on use restrictions. Define each denominator before counting.
- Gather explanations: Use appropriately approved staff interviews or workflow reviews to understand exceptions; report themes without exposing requesters or sensitive cases.
- Agree on outputs: Deliver a process map, findings with limitations, and prioritized changes with named owners, required resources, and a proposed reassessment date.
Separate evaluation from implementation. If the project recommends a revised intake form, it has not shown that the form works until the organization adopts and assesses it. The site and university must determine whether interviews or data activities require institutional review, other ethics review, a data-use agreement, or additional community permission; a student should not make that determination alone.
If recommendation letters are an obstacle, public health graduate programs with no recommendation letters concern a different degree-level search; verify the DrPH program's own requirements rather than transferring an MPH policy to it.
A suitable DrPH program combines practice-focused leadership, policy and ethics, evaluation methods, and supervised work with organizations. For this project, test the program's support rather than relying on a course title: Can faculty advise on process evaluation? Will a qualified site mentor have time to review a workflow map? Does the curriculum cover organizational change as well as data analysis?
Ask how the school handles projects at a student's employer, confidential deliverables, changes in site access, and disagreements between faculty and the organization. Online delivery may reduce travel but does not remove scheduled classes, residencies, team work, or the need for timely partner review. A comparison of public health doctoral education options online should therefore include project supervision and scheduling policies, not delivery format alone.
There is no universal "DrPH data governance" admissions standard. Schools set their own degree, experience, prerequisite, testing, and application requirements. A competitive applicant should be able to explain prior responsibility for a public health decision, the leadership problem they want to address, and why an applied doctorate - rather than additional technical coursework - fits their goal.
Document responsibilities rather than relying on a managerial title: agreements negotiated, cross-agency decisions coordinated, privacy or equity concerns addressed, and changes carried through with partners. A project idea is stronger when a potential site sponsor can discuss feasibility, but an informal conversation is not permission to access records or conduct research.
Applicants who need earlier graduate preparation can consider comparing online MPH admission requirements before assuming they need a doctorate.
Time and cost depend on the program's credit requirements, enrollment pace, tuition basis, fees, residency or travel obligations, and the time needed for approvals and project revisions. A student working with a health department should also budget for meetings during business hours and possible delays if a data steward or legal reviewer changes.
Request a term-by-term degree plan and a written estimate covering tuition, required fees, travel, and any charges for continued enrollment while finishing the project. Ask whether employer education assistance applies and what happens if site access ends. Comparing public health doctorate tuition and length can help frame the trade-off, but the school's estimate and project policies should control the decision.
Government health departments, health systems, research organizations, and community-serving partnerships need people who can translate data-sharing rules into workable decisions. Relevant responsibilities appear in public health informatics, surveillance leadership, privacy and compliance, interagency partnership management, and evaluation roles. Job titles vary; assess whether a posting actually includes stewardship, agreement review, stakeholder negotiation, or process improvement.
A DrPH can support advancement into practice leadership when combined with substantial organizational experience. It does not grant legal authority to approve releases, replace specialist privacy training, or guarantee a management appointment. Someone aiming primarily to develop new research methods may be better served by a research doctorate; a public health PhD affordability guide is useful for comparing that distinct path, not for treating the degrees as interchangeable.
What Salary and Job Outlook Can Public Health Data Governance Professionals Expect?
There is no single federal occupation called "public health data governance professional," so a salary figure for that title would be misleading. Compensation depends on whether the job is classified as an epidemiologist, information-security specialist, health-services manager, policy professional, or another occupation - and on its actual duties, location, sector, and seniority.
Bureau of Labor Statistics occupational wages and projections describe those occupations, not the earnings or job prospects of DrPH graduates.
For a useful comparison, collect postings for the roles you could realistically hold before and after study. Compare stated salary ranges, required experience, decision authority, and whether a doctorate is required or merely preferred.
If your target role is accessible through an MPH plus supervised experience, additional doctoral tuition may have limited career value. Applicants weighing that route after an uneven academic record can consult guidance on applying to an MPH with a lower GPA, while checking each school's current policy.
Other Things You Should Know About Public Health
Possibly, but publication requires separate attention to the organization's approval, confidentiality terms, authorship expectations, and any applicable ethics review. Permission to complete a course project is not permission to publish internal records.
They can help demonstrate a proposed measure or workflow. They cannot establish how the organization's actual requests were handled unless the project also has authorized evidence of that process.
The organization's authorized data steward, legal or privacy officials, and any partners with decision rights should follow the governing agreement and applicable law. The student can document where the procedure is unclear but should not issue a legal determination.
Use a version approved for public release, such as a generalized process map or redacted evaluation template. Remove confidential workflows, agreement terms, identifiable information, and findings the partner has not authorized for disclosure.
- Tools and Strategies for Quality Improvement and Patient Safety | nih.gov https://www.ncbi.nlm.nih.gov/books/NBK2682/
- CDC Program Evaluation Framework, 2024 | MMWR https://www.cdc.gov/mmwr/volumes/73/rr/rr7306a1.htm
- Rapid Evaluation Approaches for Complex Initiatives | ASPE https://aspe.hhs.gov/reports/rapid-evaluation-approaches-complex-initiatives-0
- Document analysis in health policy research: the READ... - PMC https://pmc.ncbi.nlm.nih.gov/articles/PMC7886435/
- Guiding Principles for Successful Data Sharing Agreements | ed.gov https://ies.ed.gov/learn/blog/guiding-principles-successful-data-sharing-agreements
- Summary of the HIPAA Security Rule | hhs.gov https://www.hhs.gov/hipaa/for-professionals/security/laws-regulations/index.html
- Data Management & Sharing Policy Overview | nih.gov https://grants.nih.gov/policy-and-compliance/policy-topics/sharing-policies/dms/policy-overview
- Section 5. Developing an Evaluation Plan - Community Tool Box https://ctb.ku.edu/en/table-of-contents/evaluate/evaluation/evaluation-plan/main
- 3 Model Data Use Agreements: A Practical Guide | mit.edu https://admindatahandbook.mit.edu/book/v1.0-rc5/dua.html
- Privacy Balancing Assessments | University Privacy Office https://privacy.yale.edu/resources/privacy-balancing-assessments
