Procedure for signing-off the proposed upload
I can imagine that some kind of vetting process would be desirable, to verify that the data being uploaded to Zenodo contains the expected information.
Perhaps this should be coupled with some official statement (email or written letter) from the data owner that the upload to Zenodo is sanctioned.