Responsible data sharing is a growing area of concern in the humanitarian sector. The adoption of new digital tools and a drive for more granular monitoring of programmes have meant humanitarian crises are increasingly ‘data-rich’ environments. Efforts to gain better understanding of contexts, quantify the impact of programmes and coordinate responses have meant more data sharing seems unavoidable. Yet at the same time, concerns around the impact of such a trend have grown more prominent. Major data breaches, including those recently affecting the International Committee of the Red Cross (ICRC), have raised questions around the risks to already-marginalised people when data collected by aid providers is inadequately protected and falls into the wrong hands.