Back to feed
Open access

Data Governance Transformation: Now is the time to revisit Data Governance Policy

Jul 2026 · International Journal of Population Data Science · Vol 11 · 0 citations
Medicine

Abstract

This paper presents MDI’s Data Governance Transformation (DGT) project, an already-in-use data governance policy & infrastructure framework developed to support robust implementation of Privacy Enhancing Technologies (PETs), govern rapid AI development, and confront precedent shattering data use in the United States. As government agencies increasingly rely on complex and distributed data ecosystems, traditional data management approaches have proven insufficient to ensure data quality, accessibility, privacy, and interoperability. This framework establishes a cross-functional data governance structure that includes clearly defined roles, a RACI (Responsible, Accountable, Consulted, Informed) matrix, a standardized change control process, and an architecture rooted in medallion-style data layering. It also includes practical guidance on the following: conducting a data inventory, aligning with cloud and privacy requirements, and coordinating with contractors to ensure data portability and reproducibility. By embedding PETs and clear accountability mechanisms, this framework not only supports compliance with regulatory mandates but also enables data-driven decision-making and responsible use of AI. The framework serves as a replicable model for other government and non-government entities seeking to implement or refresh their data governance strategies to meet the demands of modern public service delivery.

Read PDF

Similar papers

Review Open access 2020

Data Governance Frameworks for Enterprise Analytics Platforms

The findings are that companies that implement organized governance systems record dramatic advancement in the quality of data, compliance rates, and the accuracy in analytics, and the need to incorporate governance frameworks in enterprise analytics strategies to promote sustainable data-driven change is highlighted.

Jessica Rachel Brown · 0 citations
Review Open access Jul 2026

Governing CO2 Information: An Organisational and Data-Governance Model for Sustainable Procurement

Companies now collect more information about the greenhouse gas emissions of what they buy than ever before, yet much of it never shapes a purchasing decision. This review examined why carbon information so often remains unused in procurement and proposed an organisational and data-governance model to close the gap. A doctoral analysis of information processes in sustainable procurement was synthesised with open-access research published between 2021 and 2026, covering data governance, data ecosystems, sustainable procurement and supply-chain carbon accounting. Carbon information emerged as a layered system in which data, digital systems, decision models and organisational structures depend on one another, so that a weakness in any layer disables the rest. Two layers that practice neglects most received closest attention. At the data-governance layer, reliability rested on clear ownership of each figure, harmonised calculation and verification standards, and reporting arranged to protect data quality. The organisational layer demanded more: a deliberate balance between central and local control, standing coordination among procurement, sustainability and technical functions, carbon indicators built into sourcing targets, and staff able to interpret emissions figures. Evidence from public purchasing and from firm-level studies indicated that disciplined procurement governance measurably lowered emissions. The review concluded that the obstacle to acting on carbon information is organisational before it is technical, and that assigning responsibility and governance should precede further investment in measurement tools. Keywords: carbon information governance, data governance, sustainable procurement, organisational design, data ownership, scope 3 emissions, supplier carbon data

Lukas Büeck, L. Ritter · 0 citations
Review Open access Jun 2026

Building public authority for cloud governance and data sovereignty in Somalia under structural dependence

Cloud computing now supports public administration, finance, health, communications, and platform-based services, but it also makes public control over data, jurisdiction, accountability, and critical digital infrastructure harder to exercise. These tensions are sharper in fragile and low-capacity settings where digital markets often expand faster than the institutions responsible for governing them. This article presents a qualitative single-case study of Somalia, supported by structured literature synthesis and document analysis, to examine how data sovereignty is shaped under conditions of infrastructural and institutional dependence. The analysis is anchored in governance-capacity theory under structural dependence: legal authority is treated as necessary but insufficient unless it is matched by institutional routines, infrastructure visibility, and leverage over systemically important private actors. Drawing mainly on peer-reviewed literature published between 2023 and March 2026, with older foundational works retained only where conceptually necessary, together with Somalia’s Data Protection Act of 2023 and related policy documents, the article argues that Somalia’s challenge is best understood as governance under structural dependence. Formal legal jurisdiction has begun to emerge, but available public evidence suggests that practical control remains constrained by thin regulatory capacity, externally mediated cloud and hosting arrangements, and the infrastructural power of telecom-fintech firms that already perform quasi-public functions. A credible policy pathway therefore requires sequenced hybrid governance: operationalizing the data protection regime, mapping critical cloud dependencies, using procurement and audit rights to improve visibility, imposing risk-based obligations on systemically important private actors, and coordinating regionally on cross-border data governance. More broadly, the Somali case suggests that digital sovereignty in fragile states should be treated as an uneven governance capacity that can be strengthened incrementally rather than as an all-or-nothing condition of technological independence.

A. Abdi, A. Abdulle, Maryan Mohamud Hambali · 0 citations
Open access 2022

Smart Governance: Policy Framework for Digital Public Services

Smart governance represents a modern approach to public administration that uses digital technologies, data-driven decision-making, and citizen-centric service models to improve efficiency, transparency, and accountability. With the rapid growth of information and communication technologies (ICT), governments are shifting from traditional bureaucratic systems to digitally transformed governance models that emphasize interoperability, inclusiveness, and responsiveness. Technologies such as e-governance platforms, mobile government services, artificial intelligence, blockchain, and cloud computing are reshaping the government–citizen relationship. This study proposes an integrated policy framework for smart governance to ensure secure, accessible, and sustainable digital public service delivery. Using a multidisciplinary and mixed-method approach, including policy analysis, global case studies, and quantitative performance evaluation, the research examines factors such as interoperability, citizen engagement, institutional capacity, and regulatory compliance. The findings indicate that governments with integrated policy and strong technological governance achieve higher efficiency and greater public trust. However, challenges such as cybersecurity risks, data privacy concerns, digital illiteracy, and organizational resistance remain significant barriers. The study recommends strategic policy interventions and collaborative governance models to support sustainable digital transformation in public administration.

Jose Fernandez, M. González · 0 citations
Preprint Jul 2026

On Exercising Governance Power in Decentralized Autonomous Organizations

A decentralized autonomous organization (DAO) is a governance entity that allows its stakeholders to manage blockchain-based protocols through smart contracts. The DAO explicitly specifies how stakeholders make and enforce decisions concerning a protocol's operation in a smart contract, aptly referred to as its governance contract. The design of this governance contract, therefore, has far-reaching implications for the security (trust) and privacy (transparency) of the smart contracts managed by the DAO and its stakeholders. In this work, we (i) explicate the trust and transparency trade-offs of the design choices in implementing a DAO and (ii) highlight how poor choices introduce critical vulnerabilities, using real-world examples as case studies. To this end, we analyze $48$ public, actively used Ethereum-based DAOs that control a vast capital. We classify the design choices into a handful of key dimensions that succinctly capture how a DAO's stakeholders initiate a protocol change, vote on it, and, based on the voting outcome, execute that change. Our analyses crucially uncover a new class of attacks, which we call governance attacks, that directly exploit the fundamental design of a DAO's governance mechanisms, even if we assume bug-free implementations.

Vabuk Pahari, B. Chandrasekaran, Johnnatan Messias et al. · 0 citations
Review Open access Aug 2026

Data Governance for Compliance with the European Digital Product Passport: a Systematic Literature Review

The Digital Product Passport (DPP), proposed by the European Commission, is a unique identifier containing detailed information about a product’s life cycle to improve traceability, transparency and sustainability, which promotes the circular economy (CE). This study examines the data governance required for DPP implementation in Europe, identifying regulatory requirements and assessing governance approaches capable of supporting DPP ecosystems. A systematic literature review, following the PRISMA methodology, included an analysis of EU legal and technical requirements together with governance proposals identified in academic and gray literature. Based on the governance approaches identified in the literature, three models were selected for analysis: data trusts, data cooperatives and blockchain-based governance. These approaches were specifically evaluated according to their ability to address four key DPP requirements: interoperability, security, data owner control and competitiveness. As DPP implementation remains at an early stage and has not yet been fully deployed in any product category, this study adopts a cross-sectoral perspective focused on generic DPP requirements applicable across product types. The findings provide a conceptual basis and strategic guidelines for future DPP deployment, highlighting the importance of appropriate governance mechanisms to strengthen the DPP’s role as a catalyst for the circular economy.

Xabier Narbaiza Iriondo, Borja Diez-Cañamero, Irantzu Calvo Santamaria · 0 citations