Assumption is open first then find restrictions (not the other way around).
For example, we assume that government data and data funded by public funds should be open by default.
From this rule, we apply exceptions on what data we need to protect.
Information protected by the Constitution and statutes (e.g. national security, personally-identifiable information)
Ethical considerations of data (e.g. indigenous communities, sensitive information)
It shouldn’t be the other way around where we close all our data at the start and just find which data we can open/share.
Aside from ethical and legal considerations (e.g. constitutionally and statutorily protected data), public data and data collected by public institutions should be open.
Add mechanisms and protections to ensure and facilitate openness