Fiducia TogetherData governance
Knowing what data you hold, where it is, and who is responsible for it.
Please note: This page explains what a term means. It is general information, not legal, financial, tax or investment advice, and it does not know anything about your business. Before you sign, file or commit to anything, check it with an accountant, a solicitor, or the official guidance we link to.
What it means
Data governance is the set of policies and responsibilities covering how data is collected, stored, used, shared and disposed of.
Why it matters
Every data obligation — GDPR, a subject access request, a breach notification, a tender questionnaire — starts with knowing what you hold and where. Most small businesses do not.
What it looks like in practice
Build a record of processing: what personal data, why, on what lawful basis, where it is stored, who it is shared with, and how long it is kept. It is a legal requirement above a size threshold and useful below it.\n\nSet retention periods and actually delete.
What to watch out for
Shadow data: spreadsheets on laptops, old exports, a former employee's inbox. It is where breaches come from and it is invisible on any system diagram.
Where to get proper advice
The ICO's accountability framework, free and structured as a checklist.
Where to read more
Last reviewed 2026-08-28 by Fiducia Together · Next review due 2027-08-28
Please note: This page explains what a term means. It is general information, not legal, financial, tax or investment advice, and it does not know anything about your business. Before you sign, file or commit to anything, check it with an accountant, a solicitor, or the official guidance we link to.