Devensa Advisory
Get started

Who Actually Owns the Data?

Poor data quality costs the average organization $12.9 million a year, according to Gartner. See why the owner-versus-custodian confusion is usually to blame.

Devensa Advisory 3 min read
Data lineage from sign-up form to CRM to a named owner. Three hands touch the customer record and one is accountable.

Poor data quality costs the average organization $12.9 million a year, according to Gartner research.1 After a data quality incident, the post-mortem at most companies turns up the same discovery: three different departments each assumed another one owned the customer record. IT thought the business owned it because IT just stores what it's given. The business unit thought IT owned it because IT built the database. Data governance, if it existed at all, thought ownership was a policy question, not an operational one.

Nobody was lying. Everybody was reasonably wrong, because “owns the data” means something different depending on who you ask, and most companies never force an answer until something breaks.

Owner and Custodian Are Not the Same Job

DAMA-DMBOK, the closest thing data governance has to a shared reference, draws a distinction worth stealing: a data owner is accountable for the quality and appropriate use of a specific data domain. A data steward or custodian actually manages it day to day. Confusing the two is where most governance programs go sideways. IT is almost always the custodian. It's rarely, and shouldn't be, the owner. The business unit that generates and depends on the data should be.

What Lineage Actually Reveals

Data lineage makes the problem visible in a way policy documents don't. Trace a single customer record from the sign-up form through the CRM, the marketing platform, and the analytics warehouse, and count how many hands touch it without anyone being accountable for its accuracy at each hop. In most companies that number is uncomfortable. Data quality doesn't degrade at one point. It degrades a little at every handoff where nobody's specifically on the hook.

Ownership Needs Hours, Not Just a Title

My actual opinion here, since this gets talked around a lot: assigning data ownership by department is close to useless if the department head has no data literacy and no time carved out for the role. Ownership needs to come with actual hours in someone's week, not just a line in a RACI chart nobody opens after the workshop that produced it. Pick fewer domains, name real owners, give them the bandwidth, and you'll get further than a company-wide ownership matrix that looks complete and functions as decoration.

Frequently asked questions

Should IT ever be a data owner instead of a custodian?

Only for genuinely IT-generated data, like system logs. Anywhere the data describes the business, the business should own it.

How many data domains should one owner realistically manage?

One or two with real depth beats five with none. Breadth without bandwidth is how ownership becomes symbolic.

What's the first sign a data ownership program isn't working?

Two departments reporting different numbers for what should be the same metric, and neither one flagging it as a problem.

If finance and product reported different numbers for the same metric tomorrow, would you know why within the hour?

Sources

  1. Gartner, 12 Actions Data and Analytics Leaders Can Take to Improve Data Quality, cited via Verato. https://verato.com/resources/gartner-dq

Originally published on the Devensa blog.

Keep reading

All insights →
Data Governance

Five Data Findings That Repeat in Every Audit

Poor data quality costs the average company $12.9M a year. See the five data findings that repeat in audit after audit and what actually fixes them.

AI Governance

Is Your AI Governance Tool Actually Governance?

Many AI governance tools are controls tools. Learn how governance and controls differ, why it matters, and what to ask before you buy.

Privacy

Who Owns Privacy? Why a DPO Title Doesn't Guarantee Accountability

Twenty US states now have comprehensive privacy laws in effect. See why an independent DPO still isn't the same as owning privacy operationally.

Put a name next to every gap.

A Current State Assessment scores where you are across the six domains and sequences what comes next, with owners attached.

Get started Explore Data Governance