This contract needs to define the meaning of the data, its origination, the constraints imposed by its originator (which need to include the data owners' rights) and the scope, or conditions, which apply to the data. This could be implemented in various ways, but should not be locked into a single medium or format, since most data can be transported over various mechanism and the contract would be relevant regardless of the mode of storage or representation.
To provide an optimal control over data, you need to consider several elements:
- Holistic flow chart: starting from origination and extending through the data flow's life cycle as far as possible from a practical and risk/value proposition perspective.
- Governance body: together with the stakeholders who manage the links in the data flow, determine the policy and processes to follow to ensure initiation, use and retirement of data. This would include everything from quality control, issue resolution, data life management and related responsibilities.
- Internal governance controls: develop measures and processes to ensure compliance with the data ecosystem policy, while ensuring compliance with related policies around the internal business components which handle the data. For example: while you need to ensure you keep customer data for as long as it legally permissible, you also need to consider whether keeping it for that long serves a purpose and value to the business (as well a cost of maintenance and prolonging of handling risk)
No comments:
Post a Comment