What is data governance? (and the lightweight SME version)

Data governance is the set of decisions about who owns each important piece of data, what it means, how good it has to be and who may use it, written down and actually followed. For a small business it can fit on one page: a list of key data, an owner for each, agreed definitions and a short quality check.

What does data governance actually cover?

Strip away the frameworks and four questions remain:

Part	The question it answers	SME-sized version
Ownership	Who decides about this data and fixes it when it is wrong?	One named person per key dataset
Definitions	What exactly does this number mean?	A shared glossary of your top 10–20 measures
Quality	How good does it have to be, and how do we know?	Two or three checks per dataset
Access	Who may see or change it?	Roles in your tools, reviewed twice a year

The UK Government's Data Quality Framework (published December 2020) makes the same point from the public-sector side. Its first principle is to commit to data quality with accountability across the organisation, and it gives six dimensions for judging quality: completeness, uniqueness, consistency, timeliness, validity and accuracy. You do not need all six for every dataset; pick the two that would hurt most if they failed.

Why does it matter for a small business?

Because the cost of no governance is usually argument, not fines. Two reports show different revenue figures, someone spends a morning reconciling them, and the meeting decides nothing. A spreadsheet called v4_FINAL_updated is a governance problem in disguise, as we put it in our Power BI vs Excel comparison.

There is a legal thread too. UK GDPR's accountability principle says you must be responsible for, and able to demonstrate, compliance for personal data. The ICO's guide to accountability and governance (last updated February 2026, and under review after the Data (Use and Access) Act) says a smaller organisation will most likely benefit from a smaller scale approach, with measures that are risk-based and proportionate. That is permission to keep it light, not to skip it. This is general information, not legal advice.

What does lightweight SME data governance look like?

A worked example. Picture a 40-person wholesaler whose sales, finance and warehouse teams each report "orders" differently. Their one-page governance register might read:

• Customer list — owner: sales manager. Source: the CRM. Check: no duplicate accounts; every account has a billing contact.
• Orders and revenue — owner: finance lead. Definition: revenue is invoiced value excluding VAT, recognised on the invoice date. Check: the monthly total matches the accounts system.
• Stock levels — owner: warehouse manager. Check: refreshed by 7am daily; negative stock is flagged, not hidden.
• Access — finance and directors see margin; everyone else sees volumes.

Four lines, three owners, one definition that ends the argument. Our data strategy guide shows where this sits in the wider plan.

How do tools like Power BI and Fabric help?

They enforce what you have decided; they do not decide it. A well-built Power BI semantic model holds each agreed definition once, so every report uses the same "revenue". Row-level security applies the access line. Microsoft's Fabric governance overview (updated September 2026) lists endorsement to certify trusted items, lineage to see what a change will break, and domains to group data by department, with sensitivity labels needing additional Microsoft Purview licensing.

In our view, buy the tooling after the register exists. A certified dataset nobody owns is still unowned.

If you want the register drawn up with you, it is part of our data strategy and governance work, within the wider data and BI practice.

Frequently asked questions

What is data governance in simple terms?

Data governance is the set of decisions about who owns each important piece of data, what it means, how good it has to be and who may use it, written down and actually followed. It is the rulebook that lets people trust a number without checking it themselves.

Does a small business need data governance?

Yes, but a small version. The ICO says smaller organisations will most likely benefit from a smaller scale approach to accountability. For most SMEs that means a one-page register of key data, a named owner for each item, agreed definitions and a short quality check, not a governance board.

What is the difference between data governance and data management?

Governance decides the rules: owners, definitions, quality standards and access. Data management is the day-to-day work that follows those rules: building pipelines, cleaning records, running backups and refreshing reports. Governance without management is paperwork; management without governance is busywork with no agreed target.

Is data governance the same as GDPR compliance?

No, but they overlap. UK GDPR requires you to be able to demonstrate compliance for personal data. Data governance covers all your important data, personal or not, and gives you the owners and records that make that demonstration possible.

---

Easy Insight is a UK consultancy for AI, web, apps and data — senior specialists only, no juniors.