Close sites icon close

Country sites

Search for the country site.

Country profile

Country website

PRIMES Interoperability Gateway (PING) - Frequently asked questions

PRIMES Interoperability Gateway (PING) - Frequently asked questions


Topics

General 

What is PING?

The PRIMES Interoperability Gateway (PING) is a data-sharing platform that allows UNHCR and partners to exchange personal data and information with UNHCR’s Population Registration and Identity Management Eco-System (PRIMES).  

What is the objective of PING? 

UNHCR's work with partners requires safe, secure, and efficient sharing of personal data and information. UNHCR's Interoperability Gateway, PING, makes this possible with governments, UN and NGOs, and other partners, enabling opportunities for inclusion and enhancing the delivery of protection, assistance, and solutions. 

PING is the tool for exchanging any personal data or information with UNHCR. This includes biographic data and individual information recorded in UNHCR’s registration database PRIMES as well as biometrics data. 

How does PING transfer data to partner systems?  

PING also has a Partner Portal for monitoring data transfer processes and uploading datasets. 

Is PING used only for exporting data from UNHCR’s PRIMES? 

No, PING can be used for both exporting data from and importing to UNHCR’s PRIMES.  

What kind of data can be exchanged through PING?  

Any data and information stored in PRIMES can in theory be shared. This includes biographic data and individual information recorded in proGres as well as biometrics data. However, each individual data-sharing arrangement will define the data elements that can be exchanged with the partner organization.  

Data requests must be conformed with the terms defined in the arrangement. If a partner organization requires data elements that are outside the scope of an arrangement, the arrangement must be amended.  

Currently, exporting resettlement cases is being tested to support expedited processing of resettlement applications with resettlement states. 

How are PING and interoperability beneficial for forcibly displaced persons? 

PING and interoperability enhance the ability of UNHCR and its partners to provide more effective and coordinated assistance to those forced to flee. Benefits include: 

  • Improved access to services: By sharing data seamlessly, refugees and asylum-seekers can access a broader range of services from multiple organizations without the need to repeatedly provide their information;
  • Greater socio-economic inclusion: Data interoperability reduces administrative burdens and allows those forced to flee to be more easily included in systems designed and originally purposed for other population groups;
  • Better protection and support: Accurate and timely data sharing helps ensure that refugees and asylum-seekers receive appropriate protection and support tailored to their needs from a wider array of humanitarian partners. 

What are the general benefits and features of PING? 

  • Facilitate refugee inclusion in state systems: PING allows governments and partners to use data collected by UNHCR;
  • Privacy by design and by default: the platform employs a "privacy by design and by default" approach in accordance with the UNHCR Data Protection and Information Security Policies;
  • Data aggregation: the platform can aggregate data from different UNHCR PRIMES databases according to the needs of the partner, streamlining the data-sharing process;
  • Data transformation: PING applies data transformations to any number of requested data elements, minimizing the data processing effort required by the partner;
  • Multiple data transfer modalities: PING supports various data transfer modalities, including one-way or bi-directional; on-demand or scheduled; and API-based or file system-based;
  • Secure data transfer: PING ensures secure methods of data transfer between UNHCR and partners, adhering to data protection and privacy principles;
  • Secure partner portal: the platform provides a secure partner portal where partners can monitor, and audit completed or in-progress transfers.

Is PING live in any operations? 

PING is currently being rolled out in a number of countries, UNHCR is active in. You can find an overview of various implementations on the Case studies page. 

How can I get started with PING? 

Partners, that wish to access UNHCR data, must contact their nearest UNHCR country office. The country office will guide the partner through the process of establishing a data-sharing arrangement (see below). Once this is finalized, the UNHCR country operation begins the PING onboarding process.

Select a country in the drop-down to find contact details for your local office:

What is a data-sharing arrangement? 

A UNHCR data-sharing arrangement takes one of three forms:  

  • Data Sharing Agreement (DSA)  
  • Memorandum of Understanding (MoU)  
  • Partnership Agreement, Annex C: Processing and Protection of Personal Data

    Data protection

    Can anyone have access to UNHCR data? 

    No, access to UNHCR data is strictly controlled and limited to authorized entities and individuals who meet specific criteria, including: 

    • Alignment with data protection principles: Access is granted only to those with a legitimate need to use the data for purposes aligned with UNHCR’s mandate meeting the conditions set out under para 44 of the General Policy on Personal Data Protection and Privacy (GDPP);
    • Data Sharing Arrangements: Access is contingent upon the establishment of formal data sharing arrangements that outline permissible uses and obligations; 
    • Authorization and oversight: Access is granted through a formal authorization process, and ongoing oversight ensures compliance and security. 

    What are the permissible uses of data transferred from UNHCR?  

    Processing of UNHCR data must comply with UNHCR’s mandate and personal data protection and privacy framework and with the terms outlined in the data sharing arrangement.  

    Are forcibly displaced persons put at risk by PING sharing sensitive personal data? 

    UNHCR takes extensive measures to ensure the safety and confidentiality of refugees’ personal data. Risks are mitigated through: 

    • Data protection policies: Adherence to robust data protection principles to safeguard personal information. 
    • Secure systems: PING utilizes secure methods for data transfer and storage to prevent unauthorized access. 
    • Strict access controls: Only authorized personnel and partners with legitimate needs and proper agreements can access data. 
    • Due diligence: Comprehensive due diligence is conducted on partners to ensure they meet UNHCR’s data protection standards. 
    • Regular audits and monitoring: Continuous monitoring and audits ensure compliance with data protection protocols. 

    What policies and controls does UNHCR have in place to govern the sharing of data with external partners? 

    UNHCR has established comprehensive policies and controls to govern data sharing with external partners. This includes: 

    • Policies and frameworks: 2022 General Data Protection Policy, 2018 General Data Protection Guidance, 2015 Data Protection Policy,. Structured frameworks that include DPIAs, risk assessments, and security protocols. For more information please see our Data protection webpage.
    • Due diligence: Thorough vetting of partners and regular compliance checks to ensure adherence to data protection requirements.  
    • Mandatory training: Ensuring staff handling data are trained in data protection and privacy best practices. 

    Technical

    What are the data transfer modalities through PING?  

    • On-demand via the PING API  
    • Scheduled transfers to a secure file storage  
    • Scheduled transfers to a partner’s API  

    How does PING accept data transfers from partner systems?  

    • On-demand via the PING API  
    • Uploads via the PING Partner Portal 

    What is an API?  

    An API, or Application Programming Interface, serves as a web interface between two applications—a client application, and a serving application. An API allows a client application to programmatically execute commands against the serving application. In the case of PING, the API allows a partner’s authenticated client application to programmatically exchange data from UNHCR’s PRIMES data stores.  

    How can partners access the PING API?  

    Access to the PING API requires an application that can perform HTTP calls using a customized HTTP header. Customization of the HTTP header is required to encode the authentication credentials of the partner.  

    In most cases, partners can use the Postman application to call the PING API. However, to more seamlessly integrate the data into a broader data management practice, they may opt to develop their own client application using any general-purpose programming language (e.g., Java, C#, Python, PHP, Ruby), or using a low-code tool such as Microsoft’s Azure Power Apps.  

    Can data requests be fulfilled in near real-time?  

    Datasets that are small and that require little pre-processing (i.e. consolidation from various PRIMES sources and/or transformation) can be transferred in near real-time (i.e., synchronously). Datasets that are large or that require significant pre-processing must be generated using a background process and transferred asynchronously via the PING API or via a scheduled data push to a file storage system.  

    Which data formats are available?  

    PING can return data in JSON, XML, and CSV formats.  

    Can partners retrieve only new or modified records?  

    The PING platform does not directly provide a data synchronization mechanism whereby only new or modified records are returned. However, the client application can invoke an API endpoint that accepts a datetime parameter and returns records that were last modified after said datetime.  

    Can PING exchange aggregate data?  

    PING is designed to exchange data in a person-by-person approach. Bulk transfers of data can be provided as a series of individual transfers or by other means if such terms are defined in the data-sharing arrangement.   

    Can amended or augmented UNHCR data be transferred back to UNHCR?  

    Please contact your local UNHCR office to determine the feasibility of transferring amended or augmented data back to UNHCR.   

    Select a country in the drop-down to find contact details for your local office:

    Contact

    Who to contact for any remaining questions? 

    For any other questions regarding PING or data interoperability, please contact your UNHCR country office.  

    Select a country in the drop-down to find contact details for your local office: