Glossary · Marketing Foundations

Data Governance and Data Management

Data governance sets authority, definitions, and rules for data, while data management carries out the technical and operational work needed to apply them.
Back to glossary

What are data governance and data management?

Data governance and data management divide authority from execution. Governance identifies who can define data, approve its use, accept risk, and resolve disagreement. Data management supplies the architecture, operations, and controls that keep data available through its working life. Both disciplines meet wherever a business rule must become dependable system behavior.

The distinction helps teams route decisions. A warehouse owner can explain what a field contains. The domain owner decides what the field is allowed to mean in reporting or customer action.

A working division of responsibility

Governance owns domain scope, definitions, accountability, permitted use, access principles, quality expectations, change approval, and exception authority. Data management owns ingestion, modeling, integration, permissions, monitoring, backup, lineage, archival, and disposal. Privacy, security, legal, analytics, and business operators may contribute to both sides according to the decision.

The roles should share one issue path. Operators need a way to report that an approved rule is impossible, ambiguous, or producing harm. Owners need evidence about affected systems and users before they change it.

Where the disciplines meet

When a source is onboarded, governance approves purpose, owner, and use while management profiles and connects the data. During a schema change, governance reviews meaning and downstream obligation while management tests dependencies and release. During a quality incident, governance sets priority and acceptable correction while management traces, repairs, and monitors recurrence.

Use the same pattern for access, retention, modeled fields, and deletion. The handoff should identify the decision, implementer, evidence, exception, and review date.

Example

A company wants to use product activity in lead scoring. Governance decides which events are appropriate, who owns their definitions, how long they remain relevant, and which customers or regions are excluded. Data management builds the event pipeline, validation, permissions, and monitoring. When an event changes after a product release, the technical alert returns to the owner before the scoring rule silently changes.

A common operating boundary

Governance should approve meaning and authority. Management should implement and monitor the approved behavior. When a technical constraint makes the rule impractical, management returns the conflict rather than silently changing the definition. When a business owner requests an exception, governance records its scope and expiration. This two-way path keeps policy grounded in systems and keeps systems accountable to the business.

Set up once

See what Surface can do for your team.

Get a walkthrough