What is Data Governance?

Defining Data Governance

Data governance is the discipline that provides the strategy, authority, and control over the management of data as a corporate asset. It ensures that data is accurate, consistent, secure, and used responsibly throughout its lifecycle. It encompasses decision rights, accountability, policy enforcement, and standardisation across the enterprise.

At its core, data governance answers the questions:

• Who owns the data?

• What rules apply to it?

• How is it controlled, accessed, and maintained?

The DAMA Framework Overview

The DAMA-DMBOK (Data Management Body of Knowledge) framework is one of the most respected models for organising and governing data. DAMA International defines data governance as the overarching function that guides all other data management disciplines. The framework outlines 11 core data management knowledge areas, with data governance at the centre.

These areas include:

1. Data Architecture

2. Modelling and Design

3. Storage and Operations

4. Data Security

5. Data Integration and Interoperability

6. Document and Content Management

7. Reference and Master Data

8. Data Warehousing and Business Intelligence

9. Metadata Management

10. Data Quality

11. Data Governance (central coordinating role)

In the DAMA framework, data governance acts as the binding agent—establishing policy, stewardship, compliance, and communication across all the other domains.

Key Principles of Data Governance in DAMA

1. Stewardship and Accountability

DAMA emphasises the importance of data stewards and data owners. Stewards ensure data quality and integrity at the operational level, while owners are responsible for strategic oversight.

2. Policy and Standards

The framework advocates for the creation and enforcement of data-related policies, such as classification rules, access permissions, and retention guidelines.

3. Data Quality and Integrity

A cornerstone of DAMA-based governance is ensuring that data is accurate, timely, and fit for purpose. This includes implementing metrics, audits, and remediation protocols.

4. Metadata Management

Understanding the context, lineage, and usage of data is essential. DAMA supports robust metadata strategies to enable this.

5. Governance Councils

Effective governance involves organisational structures such as data governance councils or committees to oversee decision-making and compliance.

Contrasting Data Governance with Information Governance

While closely related, data governance and information governance have distinct scopes and objectives.

1. Scope of Focus

• Data Governance focuses narrowly on raw data—its structure, quality, definitions, and lifecycle.

• Information Governance encompasses a broader spectrum, including data and the policies, processes, people, and technologies that manage information as a strategic business asset.

2. Objectives

• Data Governance aims to optimise the management and quality of data to support operational efficiency and analytics.

• Information Governance seeks to mitigate risk, ensure compliance (e.g., legal discovery, privacy), and align information practices with business goals.

3. Disciplines Involved

• Data Governance involves roles such as data stewards, architects, engineers, and data quality analysts.

• Information Governance draws from legal, compliance, records management, risk, and business leadership domains.

4. Regulatory vs. Operational Orientation

• Information Governance is more aligned with regulatory obligations (e.g., GDPR, HIPAA), corporate policy, and risk management.

• Data Governance supports operational efficiency, business intelligence, and data analytics.

Illustrative Example

Scenario: A Healthcare Organisation

• Data Governance ensures that patient IDs are standardised across systems, medical codes are valid, and test results are accurately labelled and timestamped.

• Information Governance ensures that patient data is used appropriately, retained according to policy, protected under GDPR, and accessible during legal discovery or audit.

Here, both disciplines are vital. Data governance ensures data quality and reliability; information governance ensures lawful and strategic use of that data.

Synergistic Relationship

Though distinct, data governance and information governance should not function in silos. When harmonised, they provide a comprehensive structure for managing information assets across the organisation. Effective information governance depends on solid data governance foundations—poor-quality data cannot be governed into meaningful, compliant, or strategic use.

The DAMA framework provides the operational backbone that enables broader information governance initiatives to flourish.

Steps for Developing a Data Governance Framework (for Small Organisations)

Developing a data governance framework is essential for organisations to ensure that data is accurate, secure, and used effectively—especially as data becomes increasingly central to business operations. For small organisations or those with limited resources, the process needs to be scalable and pragmatic, focusing on core priorities and leveraging existing staff and systems.

One helpful reference point is the DAMA-DMBOK (Data Management Body of Knowledge), which outlines key data roles and responsibilities that support data governance.

1. Define Clear Objectives

Start small and be specific:

• Improve data quality

• Ensure compliance (e.g., GDPR, HIPAA)

• Enable better decision-making

• Clarify data ownership and accountability

2. Identify and Assign Data Roles (Based on DAMA Framework)

DAMA defines several roles crucial to data governance. In small organisations, one person may take on multiple roles.

3. Create a Data Governance Standard

Document your framework in a lightweight but formal way:

• Purpose and scope

• Key roles and responsibilities

• Guiding principles (e.g., data is a shared asset)

• Prioritised use cases (e.g., customer data accuracy)

4. Start with Key Data Domains

Focus on the most business-critical data (e.g., customer, financial, or regulatory data).

• Document what data is collected, why, and where it’s stored.

• Define data definitions (what does “active customer” mean?)

• Set access permissions and quality standards.

5. Develop Simple Policies and Standards

Avoid overcomplicating; use templates and adapt:

• Data classification and handling rules

• Naming conventions

• Data retention and deletion policies

• Roles and responsibilities in data lifecycle

6. Use Existing Tools and Resources

You don’t need expensive platforms:

• Use spreadsheets or simple databases to track data assets.

• Leverage built-in governance features in platforms like Microsoft 365, Google Workspace, or cloud tools.

• Consider free or low-cost tools for metadata and lineage.

7. Build a Culture of Data Accountability

• Offer short training sessions or lunch-and-learns.

• Promote data literacy and explain why governance matters.

• Encourage collaboration between business and IT.

8. Iterate and Scale

• Start with a pilot project (e.g., customer master data).

• Learn, refine policies, and gradually roll out to other domains.

• Regularly review governance effectiveness.

Final Tips for Small Organisations

• Keep it lean: Focus on high-value data and minimal viable governance.

• Be flexible: Assign roles dynamically; one person might wear many hats.

• Document clearly: Even simple processes should be written down.

• Communicate benefits: Governance is not red tape—it improves business outcomes.

Conclusion

Data governance, as defined by the DAMA framework, provides essential control mechanisms for managing data assets. However, it is only one component of a larger ecosystem governed by the principles of information governance. Recognising their differences and fostering their integration enables organisations to navigate the complexities of data management while remaining compliant, efficient, and forward-looking. In an era where information is a currency of power, clarity between governance disciplines is not just beneficial—it is imperative.