RVM operations dashboards: choose the fields before collecting personal data

Map each return-point operating decision to the minimum useful fields, separate disputes from routine dashboards and review exports and access.

An operator reviewing a dashboard

Start an RVM operations dashboard with the decisions staff need to make: check service availability, arrange collection and follow a service issue. A participant’s name, email or photograph should not become a default dashboard field merely because a connected workflow could supply it.

Define a purpose for each field

The UK Information Commissioner’s Office describes data minimisation as keeping personal data adequate, relevant and limited to what is necessary. Its guidance is under review following changes to UK legislation. Use the source in its UK context, and assess the applicable requirements separately for each deployment.

The following is a proposed design worksheet, not a description of confirmed RECYNEX telemetry or a legal compliance certification. Agree the operating purpose, available source and responsible owner before requesting a field.

Operating decision Candidate minimum fields Boundary to review
Is the return point available? Equipment identifier, status and last verified time Do not put participant identity into a status view
Is collection required? Location, measured count or fill reading, measurement time Confirm that the configured equipment supplies the stated measurement
Who is handling a service issue? Case reference, state and responsible team Keep detailed participant correspondence outside the general dashboard
Does a return dispute need investigation? Approved exception reference and necessary related records Use restricted access and the approved support process

A measurement needs a definition as well as a number. Label the time window, source, unit and whether the value is estimated or confirmed. Do not present a container count as a recycling outcome, donation transfer or verified refund.

Review exports as carefully as screens

Test a sample export before approving the dashboard. Check columns, free-text notes and URLs for identities or unnecessary details. Review public displays separately from staff views. A field hidden on screen can still appear in a downloaded file.

Specify access by task, identify the field owner and record the retention decision under the applicable policy. Do not invent a universal retention period. If a field has no defined purpose, remove it from the proposed routine dataset and resolve any exception through the appropriate review.

Common questions

Do operational counts always require participant identity? Determine the purpose first. Many operating decisions can be supported by aggregate or equipment-level data; an exception needs its own justification and controls.

Does hashing an account identifier make the data anonymous? Do not assume that. Review whether a person can still be identified and apply the appropriate controls.

Discuss the required fields through platform planning and the project enquiry route.

Related stories

Start with the decision in front of you

Tell us what you need to return and where. We can help define the remaining details.