Data Governance │Good Governance
Framework for data governance, including data quality and integrity, data protection, and compliance with relevant laws and regulations.
What does good look like? Our guide to creating digital standards and improving your skills, capacity and capabilities.
Strategy and policy
- The organisation has a clear knowledge and information management (KIM) (or data strategy) that aligns with its overall business strategy and objectives. The strategy includes plans for data collection, analysis, utilisation, and sharing, as well as data infrastructure development. The policy outlines roles, responsibilities, and processes related to data management.
- Key performance indicators (KPIs) which cover the company’s strategic, financial, and operational needs are regularly checked and reported to senior leaders, board members and residents.
Data Quality and Integrity
- The organisation has a well-defined data architecture that supports efficient and effective data management and use. Essential data on customers, staff, finance, and compliance should be defined. Information is recorded in a “master” system which is consistent with all other sources (systems, spreadsheets, software).
- Processes and systems are in place to ensure the accuracy, consistency, and completeness of data. There are mechanisms for identifying and addressing data quality issues promptly. Regular audits of data quality are conducted to ensure continued accuracy and reliability.
- Data should be owned by the business. Data owners or data stewards are senior stakeholders within your organisation who are accountable for the quality of one or more data sets. Regular training on data governance, data quality, and data protection is provided to relevant staff.
- Organisations are encouraged to follow the HACT’s UK Housing Data Standards. Regular compliance audits are performed, and any identified issues are promptly addressed.
Confidentiality and personal data
- Personal data is managed and protected in compliance with relevant data protection laws such as the General Data Protection Regulation (GDPR). Individuals can easily access, correct, or delete their personal data in line with their rights under data protection laws. A Data Protection Officer has been appointed within your organisation, who is registered with the Information Commissioners Office.
- Ensure that AI processes comply with data protection laws, including GDPR, when handling personal data. Develop mechanisms for individuals to exercise their rights regarding AI-processed personal data.
- The ISO27001 standard for information security management system enables organisations to manage the security of assets such as financial information, intellectual property, employee details or information entrusted by third parties.
- Develop a clear strategy for the ethical and responsible use of AI in alignment with your overall data governance framework. This should include guidelines on data acquisition, model training, deployment, and monitoring.
- Ensure that AI-generated data is integrated into your data architecture and is subject to the same data quality standards as other data sources. This includes maintaining accuracy, consistency, and completeness of AI-generated data.
- Incorporate guidelines and policies for AI ethics and compliance within your data governance framework. Address issues related to purpose, authenticity, bias, fairness, transparency, and accountability.
- Clearly define ownership and stewardship of AI-generated data, specifying roles and responsibilities for maintaining its quality and integrity.
- A data warehouse or business intelligence platform should be in place to report and present data from many systems. Spreadsheets, where used, are designed, and maintained by competent users.
- There is there a range of data science skills across the organisation supported by a professional development and skills training programme.
The Marzipan Way is a framework for managing digital transformation in social housing. One page, one section or the whole set of standards, there is something to learn for everyone.
If you would like to learn more, please contact email@example.com for a free, no obligation conversation.