05 · Topic cluster

MEAL, ethics and safeguarding

Accountability to affected populations, feedback and complaints mechanisms, learning and adaptive management, research ethics and consent, and data protection.

MEAL adds two letters to M&E, and both are obligations rather than techniques. Accountability means the people a programme affects can see what it promised, say what they think of it, and be answered. Learning means findings change what the programme does, rather than accumulating in reports nobody reopens.

The ethics pages here are not decoration. M&E routinely collects data from people in vulnerable circumstances, often in contexts where a leak carries real consequences, and frequently under a power imbalance that makes consent complicated. The duties are legal as well as moral — Kenya’s Data Protection Act, 2019 and the GDPR both bite on ordinary programme data — and they are easier to design in than to retrofit.

  1. 01 · Updated 18 August 2026

    Accountability to Affected Populations (AAP)

    AAP as the responsible use of power: the IASC commitments, CHS 2024, participation in M&E, safeguarding, and information as a form of aid.

  2. 02 · Updated 18 August 2026

    Feedback and complaints mechanisms

    Designing feedback and complaints channels that close the loop: channel choice, sensitive-complaint handling, response standards and using the data.

  3. 03 · Updated 18 August 2026

    Learning agendas, adaptive management and after-action reviews

    Making learning operational: learning agendas, USAID's CLA framing, evidence-informed adaptation, and the after-action review as a disciplined ritual.

  4. 04 · Updated 18 August 2026

    Research ethics, do no harm and informed consent in M&E

    The ethical floor for M&E data collection: Belmont principles, UNEG ethical guidelines, CIOMS, consent that is real, and when ethical review applies.

  5. 05 · Updated 18 August 2026

    Data protection for M&E: Kenya's DPA 2019 and the GDPR

    What Kenya's Data Protection Act 2019 and the GDPR require of M&E data: lawful basis, minimisation, retention, transfers and breach duties — practically.