Data Governance

A framework of policies, procedures, and standards ensuring that data is accurate, secure, compliant, and properly managed across an organization or network.

Key components of traditional data governance include: Data Quality (ensuring accuracy), Data Architecture, Data Security, and Master Data Management. In decentralized systems, 'code is law' supplements traditional governance, but human coordination (via DAO proposals) is still required to handle edge cases, protocol upgrades, and regulatory [compliance](/en/terms/regulatory-compliance).

        graph LR
  Center["Data Governance"]:::main
  Rel_big_data["big-data"]:::related -.-> Center
  click Rel_big_data "/terms/big-data"
  Rel_blockchain_governance["blockchain-governance"]:::related -.-> Center
  click Rel_blockchain_governance "/terms/blockchain-governance"
  classDef main fill:#7c3aed,stroke:#8b5cf6,stroke-width:2px,color:white,font-weight:bold,rx:5,ry:5;
  classDef pre fill:#0f172a,stroke:#3b82f6,color:#94a3b8,rx:5,ry:5;
  classDef child fill:#0f172a,stroke:#10b981,color:#94a3b8,rx:5,ry:5;
  classDef related fill:#0f172a,stroke:#8b5cf6,stroke-dasharray: 5 5,color:#94a3b8,rx:5,ry:5;
  linkStyle default stroke:#4b5563,stroke-width:2px;

      

🧠 Knowledge Check

1 / 5

🧒 Explain Like I'm 5

Think of a library. If anyone could just walk in, change words in books, or throw books away, it would be chaos. Data [Governance](/en/terms/governance) is like having a head librarian and a set of rules: only certain people can add books, all books must be properly labeled, and sensitive books are locked in a vault. In crypto, the 'library' is the [blockchain](/en/terms/blockchain), and since no single librarian is in charge, the rules are written into computer code instead.

🤓 Expert Deep Dive

The GDPR Paradox in Web3
Article 17 of the GDPR grants the 'Right to Erasure'. Public blockchains (like Bitcoin or Ethereum) are append-only ledgers designed for immutability. Storing Personally Identifiable Information (PII) directly on-chain violates this right because the data cannot be deleted. Modern data governance in Web3 solves this by keeping PII strictly off-chain (e.g., in IPFS or centralized servers) and only storing cryptographic hashes or Zero-Knowledge Proofs (ZKPs) on-chain.

Decentralized Data Governance
In Web3, governance shifts from a central Chief Data Officer to a community of token holders. Protocols like The Graph or Ocean Protocol use tokenomics to incentivize actors to index, curate, and provide high-quality data. DAOs vote on data schemas, upgrade parameters, and data access rules.

❓ Frequently Asked Questions

Why is data governance difficult on a blockchain?

Because blockchains are immutable (data cannot be changed or deleted) and decentralized (no central authority). This makes it very difficult to comply with privacy laws like the GDPR, which require companies to delete user data upon request.

How do blockchains handle private data if they are public?

Proper blockchain data governance dictates that sensitive or personal data should never be stored on-chain. Instead, the actual data is stored off-chain, and only a cryptographic hash or proof of that data is recorded on the blockchain.

What is a Data Steward?

A Data Steward is a person (or in Web3, sometimes a smart contract or DAO committee) responsible for ensuring the quality, accuracy, and security of a specific set of data.

📚 Sources