Funding available
The UKRI Strategic Priority Fund (SPF) is awarding up to £11 million of research funding for this opportunity.
This is an opportunity to research the diverse and changing realities of citizens’ needs online, and empower them to understand and control how their data is used. This will create user-focused tools to mitigate online harms whilst enabling data sharing to maximise societal benefit in the digital economy.
This is the second phase of the SPF Protecting Citizens Online (PCO) programme, aiming to fund a portfolio of projects complementary to the National Research Centre on Privacy, Harm Reduction and Adversarial Influence Online (REPHRAIN), funded through phase one.
Together, these two discrete but interdependent workstreams comprise the PCO programme.
This funding will support four interdisciplinary, collaborative projects of three years’ duration, costed at £2.75 million each (to be funded at 80% full economic cost (FEC), so £3.44 million at 100% FEC).
UKRI aims to support innovative and ambitious collaborations. Applicants must demonstrate that the amount of funding requested is commensurate with the work to be undertaken in addressing the research questions, and their ability to deliver and create impact.
Please note proposals requesting more than £2.75 million of funding are ineligible.
Research undertaken through the funded projects should complement, but not replicate, the work carried out by REPHRAIN.
Projects are expected to ring-fence funding and staff time engage with REPHRAIN during its lifetime, including attending all-hands meetings and undertaking joint work to incorporate project outcomes into the REPHRAIN Map and the REPHRAIN Toolbox in order to achieve the wider aims of the PCO programme.
Projects should also engage with REPHRAIN events, such as:
- knowledge exchange workshops
- showcases
- masterclasses.
REPHRAIN is expected to run until October 2023, so engagement is expected to be primarily within the first two years of the funded projects. However, projects will also be expected to engage with the cohort of other projects funded through this call, and the wider PCO community. Engagement must be clearly resourced and fully justified.
Grants will have a fixed start date of 1 April 2022 and end on 31 March 2025. Prior to commencement, final expenditure profiles for each grant holder will be agreed so that grant payments align with activity undertaken to deliver the grant.
The awards will be made on the terms and conditions of UKRI grants. There will be additional conditions required to meet the requirements of SPF.
Equipment over £10,000 in value (including VAT) is not available through this call. Smaller items of equipment (individually under £10,000) should be listed under the “Directly Incurred – Other Costs” heading. For more information on equipment funding, please see EPSRC equipment funding (EPSRC website).
Scope
The scope for this opportunity has been developed in collaboration with REPHRAIN.
The REPHRAIN centre is an £8.6 million three-year UKRI Research Centre of Excellence focused on the protection of citizens online, funded through the first phase of the PCO programme.
The centre is designed to build and lead the UK’s world-leading interdisciplinary community on this mission and provide a clear single front door to engage and build capacity with:
- government
- industry
- citizens.
In addition to its core research programme, a key function of REPHRAIN was to build the scope of the second phase of the PCO programme. Proposals funded through this second phase are therefore expected to:
- complement the work undertaken by REPHRAIN
- align with its core missions
- engage with the centre and wider community.
Together, these two workstreams comprise the PCO programme.
A scoping document (PDF, 620KB) was produced by REPHRAIN, which synthesised insights from literature, as well as a series of community workshops focused on the current online harms landscape. The document was subject to community review and comment, and drew out key research themes and challenges to be addressed.
Research themes to be addressed
Projects are expected to address at least one of the following three research themes:
1. Understanding citizens’ needs and empowering them in ever-changing threat contexts, where those aiming to exploit users’ data (for example for profiling for targeted advertising, unauthorised disclosure, identity theft, misinformation) regularly adapt their approaches as privacy and harm reduction measures are put in place.
Research must be grounded in an understanding of:
- the diverse realities of the users of digital technologies
- users’ understanding of online privacy and harms
- the challenges users face
- users’ coping strategies
- other dynamics of citizens and digital technologies intersecting with each other, encompassing the legal and policy landscape of online data exploitation.
Potential research challenges include:
- creating usable, inclusive, user-focused harm mitigation tools, co-designed with citizens and drawing on psychology, human-computer interaction, design and beyond, building on a nuanced up-to-date understanding of users and non-users (including traditionally excluded groups), their complex realities and changing behaviours in response to technological innovations
- enabling users to evaluate the potential risks of data sharing, alert them about imminent and potential harms (including evolving threats), such as sensitive information being involved in data breaches, and efficient, cost-effective measures to mitigate the resulting harms
- usable, scalable, user-oriented tools to prevent harm through impersonation and support citizens in the face of rapidly evolving adversarial capabilities.
2. Navigating information asymmetries between state, companies and citizens, and enabling citizens to make informed decisions about their data transactions and online behaviour.
Research must be grounded in and understanding of:
- the information and power asymmetries in the sharing of data
- what levels they sit at (for example individual, group, state)
- the policy and legal aspects of data transactions.
Potential research challenges include:
- methods, tools and techniques for responsible data usage and dissemination, navigating the tensions between data sharing for societal benefit and preservation of citizens’ privacy, grounded in an understanding of the privacy-utility trade-offs of data
- actionable mechanisms and effective tools to maximise users’ agency and enable data transparency, traceability, assurance and portability, empowering citizens to understand how their data is being used, monetised or shared with third parties, manage their privacy, and identify unfair and harmful practices by platforms
- identifying what citizens understand by ‘informed consent’ and ‘legitimate interest’, and designing novel socio-technical mechanisms for citizens to give informed consent in ‘seamless’ interactions with technologies that often involve wearables, shared devices and shared spaces.
3. Understanding the balance between the use of data-centric applications for the common good and protecting citizens’ interests in the digital age.
Research must be grounded in an understanding of:
- data-centric applications for public and economic benefit
- the ethical complexities of defining what constitutes the ‘common good’ for different citizen groups, industries and organisations
- the acceptable trade-offs, compromises, and consequences of data sharing, obtained through reasoned dialogue between various stakeholders (including users)
- how the above may reflect in the design of systems and platforms as well as regulatory and policy interventions.
Potential research challenges include:
- novel advances in privacy-enhancing technologies (PETs) to facilitate anonymous privilege management and protection of citizens’ data, whilst allowing for secure authentication of user credentials and without compromising the legitimate needs of businesses, regulators and law enforcement
- novel tools to ensure devices are sensitive to legitimate forensic needs, and enable effective apprehension of cybercrime without violating the data privacy rights of the subjects, developed at the boundary of technology, law, ethics, human rights and criminology
- sound, context-specific metrics for assessing the effectiveness of harm mitigation interventions.
Further detail on these research themes and challenges can be found in the full REPHRAIN scoping document (PDF, 620KB).
Requirements
Applicants must demonstrate:
- engagement with citizens, and co-design integrated at the heart of the research methodology
- a truly interdisciplinary approach and an existing track record of working across disciplines in the area
- engagement with relevant stakeholders in this area, including government, policy, industry and the third sector
- commitment to deliver responsible research and innovation.
Project partners
Projects are expected to involve collaborations with industry, government, policy or third sector project partners. Charity partners are welcomed. Please note that project partners who wish to receive funding from the grant must be providing services (for example consultancy) or equipment that will go through a formal procurement process audited by the host research organisation.
Methodological considerations
Applicants are encouraged to think creatively about their research methodologies, and consider incorporating elements such as:
- placements
- knowledge exchange
- public engagement
- “research in the wild” (research which identifies a genuine user need, exposes potential research ideas to beneficiaries and co-creates solutions with users).
Alignment with REPHRAIN and community engagement
Projects will also be expected to engage with the cohort of other projects funded through this opportunity and the wider PCO community. Engagement must be clearly resourced and fully justified.
Resources must be allocated to allow PDRAs to engage with their cohort, including PDRAs at the REPHRAIN centre.
Research undertaken through the funded projects should complement, but not replicate, the work carried out by REPHRAIN. Projects are expected to align with the REPHRAIN research programme’s core missions and engage with the centre and wider community. Read about REPHRAIN’s core missions.
Projects are expected to ring-fence funding and staff time engage with REPHRAIN during its lifetime, including attending all-hands meetings and undertaking joint work to incorporate project outcomes into the REPHRAIN map and the REPHRAIN toolbox in order to achieve the wider aims of the PCO programme.
Projects should clearly articulate:
- how they complement one or more of REPHRAIN’s missions
- how they will contribute to the REPHRAIN map and REPHRAIN toolbox, including resourcing allocated to achieve this.
Projects should also engage with REPHRAIN events, such as:
- knowledge exchange workshops
- showcases
- masterclasses.
REPHRAIN is expected to run until October 2023, so engagement with REPHRAIN is expected to be primarily within the first two years of the funded projects.
REPHRAIN will be running an event on 9 June to support this call and bring together the wider community. Applicants are strongly advised to take this opportunity to learn about REPHRAIN’s research programme, meet the team and network with potential collaborators.
Applicants are welcome to contact REPHRAIN in their formative phases.
Register for the event (Eventbrite).
Responsible innovation
Research has the ability to not only produce understanding, knowledge and value, but also unintended consequences, questions, ethical dilemmas and, at times, unexpected social transformations.
We recognise that we have a duty of care to promote approaches to responsible innovation that will initiate ongoing reflection about the potential ethical and societal implications of the research that we sponsor, and to encourage our research community to do likewise.
Responsible innovation creates spaces and processes to explore innovation and its consequences in an open, inclusive and timely way, going beyond consideration of:
- ethics
- public engagement
- risk
- regulation.
Innovation is a collective responsibility, where funders, researchers, interested and affected parties, including the public, all have an important role to play. Applicants are expected to work within the framework for responsible research and innovation (EPSRC website).
Applicants should consider responsible innovation throughout the research project, and include, for example, details of anticipatory work and stakeholder inclusion plans in the proposal.
In their engagement with REPHRAIN, projects should take into account the Responsible, inclusive and ethical innovation strand (REPHRAIN). Funded projects will need to seek additional approval from the REPHRAIN Ethics Board, which specifically considers responsible innovation.