A formal set of rules that governs how data is collected, stored, used, shared, and disposed of within an organization.
A data policy translates governance principles into actionable rules. It defines what data the organization collects and why, who is responsible for it, how long it is retained, how it is protected, and under what conditions it may be shared. Data policies are the foundation of a data governance program.
Common types of data policies include: data retention policies, data quality policies, data access policies, open data policies, and privacy policies. Large organizations may have a master data policy that sets overarching principles, with more specific policies for different data types or departments.
Example: A provincial government publishes an open data policy that commits to releasing non-sensitive government data as open data by default, using standard open licences, and maintaining datasets for a minimum of five years after publication. The policy gives departments clear guidance on what to publish and how.