Data Governance

Data governance vs data management: what leaders need

The practical difference between data governance and data management, a test you can apply in a meeting, how to match your symptom to the discipline that fixes it, and which to fund first.

Director comparing two printed reports at a desk while working out which figures are the approved ones

Nobody asks this question out of curiosity. It gets asked when a budget request has landed, or two reports disagree, or an AI project has stalled, and the person deciding cannot tell whether they are being sold a platform or a set of rules about who may decide things.

The usual answers do not help, because they are written as glossary entries. Governance is about policy and management is about execution, which is true and useless. It tells a finance director nothing about whether the correct next step is a tool, a hire, an operating model or a data cleanup.

This guide answers the question the way a leader needs it answered. Why it comes up, the one line distinction and a test you can apply in a meeting, what sits on each side, how to match the symptom you are experiencing to the discipline that fixes it, who owns what, which to fund first including the cases where the platform work genuinely comes first, and how the two are treated differently by regulators. Every fee named here is published on our own service pages.

The short answer. Data management moves, stores, models and serves data. Data governance decides who is allowed to decide things about it, including definitions, ownership, access, quality thresholds and retention. The quickest test is to ask what the answer to a question is: if the answer is a named person, you are in governance, and if the answer is a tool or a pipeline, you are in management. Most organisations have bought management and skipped governance, which is why they own several reporting platforms and still cannot agree what a customer is. Fix the discipline that matches your symptom rather than the one your supplier sells. Our governance work starts from £14,500 + VAT for a ten day assessment and from £45,000 + VAT to build the operating model.

Why leaders ask this question

The trigger matters, because each of these five situations has a different correct answer. Read down the first column and find the one that describes your week.

What prompted the questionWhat is really being askedThe honest answer
Two reports gave different numbers to the boardDo we need a better platform or better disciplineDiscipline. Nobody owns the definition, so both reports are correct against different rules
An AI project has been blocked on data concernsWhich team unblocks thisGovernance decides whether the data may be used and who says so. Management supplies it once that is settled
An audit or a regulator asked a question nobody could answerIs this a compliance job or a technology jobGovernance, almost entirely. The answer required is ownership and evidence rather than a system
A migration or an ERP programme is slipping on dataDo we stop and govern firstNo. Profile and fix the sources now, and stand up ownership alongside so the same mess does not arrive in the new system
A new data leader has asked for budgetIs this empire buildingAsk what decisions the money closes. A credible request names decisions and owners rather than a technology stack

The distinction in one line and the test that makes it usable

Data management is the work of moving, storing, modelling, protecting and serving data so that people can use it. The DAMA body of knowledge sets out the recognised knowledge areas, and most of them are engineering and operational disciplines.

Data governance is the work of deciding who may decide. Which definition is the approved one, who owns a domain, who grants access, what quality threshold is acceptable, how long records are kept and who is accountable when any of that goes wrong. ISO/IEC 38505 treats governance of data as a governing body responsibility rather than a technical one, which is the right instinct.

Here is the test worth carrying into a meeting. Take any real question about your data and ask what form the answer takes. If the correct answer is a person, you are in governance. If the correct answer is a tool, a table or a pipeline, you are in management.

Who decides what counts as an active customer? The answer is a person. Governance.
Where does the customer record physically live and how does it get to the warehouse? The answer is a system and a pipeline. Management.
Is this dataset allowed to be used to train a model? The answer is a person applying a written rule. Governance.
Why did last night’s load fail? The answer is a log. Management.

Run this on the five questions that annoy you most. The split is usually obvious within a minute, and the pattern normally shows a management estate that has grown without a governance layer above it.

What sits on each side

The activityWhich disciplineWho usually holds it
Agreeing the approved definition of a business termGovernanceA named business data owner
Building and running ingestion, storage and modellingManagementData or platform engineering
Deciding who may see or use a datasetGovernanceThe data owner, advised on legal grounds
Implementing the access controls once decidedManagementEngineering and identity teams
Setting the acceptable quality threshold for a fieldGovernanceThe data owner who lives with the consequence
Measuring quality and reporting the breachesManagementEngineering, with results going to the owner
Deciding what is kept, for how long, and what is deletedGovernanceThe owner, with data protection advice
Executing deletion and archiving reliablyManagementEngineering and infrastructure
Selecting a catalogue, warehouse or integration platformManagement, with governance requirements as inputTechnology, informed by owners
Resolving a dispute between two teams about a numberGovernanceThe escalation route, ending with a named decider

Two things are worth noticing. Almost every governance row ends in a person and almost every management row ends in a mechanism. And they interlock at every line, which is why treating them as competing budget requests produces bad decisions.

Match the symptom to the discipline

Leaders arrive with symptoms rather than vocabulary. This table is the practical core of the article. Find your symptom, then read the last column carefully, because that is where most money gets wasted.

The symptomWhich disciplineWhat fixes itWhat will not fix it
Two reports give the board different revenue figuresGovernanceOne named owner per definition, the definition written down, one approved source declaredAnother dashboard, or replacing the reporting tool
A report takes three days to refreshManagementPipeline engineering, scheduling and monitoringA governance policy or a steering committee
Nobody can say whether a dataset may be used to train a modelGovernanceClassification, a written rule and an approval route with a named deciderAdding metadata to a catalogue nobody is accountable for
Customer records are duplicated across systemsBoth, in this orderGovernance names the surviving record and its owner, then management builds the matching and mergeBuying a master data platform before anyone owns the rule
An audit asked who has access to personal data and nobody could answerGovernanceAn ownership register, access decision rights and evidence that both are appliedA one off permissions cleanup that nobody maintains
A migration keeps slipping because the source data is worse than expectedManagement firstProfiling and remediation on the real fields, with owners appointed alongsidePausing the programme to write a strategy
The AI pilot works on sample data and fails in productionBothQuality measurement on the exact fields the model consumes, plus an owner for each of themMore model tuning
Storage costs climb and nobody can say what may be deletedGovernanceRetention decisions made by owners and written into a scheduleMoving everything to cheaper storage
Every reporting request goes through the same two peopleManagement, with a governance causeSelf service models and documented sources, once definitions are agreed and ownedHiring a third analyst into the same bottleneck

The pattern in the last column is consistent. Governance problems get treated with technology purchases, and management problems get treated with committees. Both substitutions are expensive and both are common.

Who owns what from the board down

Most confusion between the two disciplines is really a gap in this table. Read it and identify the row you cannot name a person for.

RoleOn the governance sideOn the management side
BoardConfirms the data the organisation will be held to, and receives assurance that ownership existsApproves platform investment on a business case
Chief data officer or executive sponsorOwns the operating model, appoints data owners, resolves disputesSets platform direction and holds the budget
Business data ownerApproves definitions, decides access, accepts quality thresholds and retentionSpecifies what the business needs built
Data stewardKeeps definitions and the register current, chases exceptionsWorks with engineers so changes reach the models
Data or platform engineeringImplements the controls that governance has decidedBuilds and runs ingestion, storage, modelling, quality measurement and access
Data protection officerAdvises on lawful basis, retention and individual rights, and checks the evidenceNo operational role in the pipeline

In organisations where this question causes arguments, the missing row is almost always the business data owner. Engineering has been asked to decide what a customer is, which is a decision engineering has no standing to make and no way to defend.

Which to fund first and when the platform work genuinely comes first

Governance consultancies rarely say this, so it is worth saying plainly. There are cases where management should be funded first, and pretending otherwise wastes a year.

Fund the platform first when it is genuinely broken. If nightly loads fail most weeks and nobody trusts any number, no amount of ownership will help. Stabilise the running estate, then govern it.
Fund the platform first when a migration is already committed with a date. Profile and remediate the actual source fields now, and appoint owners in parallel so the same problems do not travel into the new system. Our ERP selection questions cover this sequence.
Fund the platform first when there is no shared data at all. A fifty person company running two systems usually needs working reporting before it needs an operating model. Governance at that size is three named owners and a shared definition list.

Governance goes first when numbers are disputed, when an AI or analytics initiative is blocked on permission rather than plumbing, when an audit finding is open, when two teams both believe they own the same data, or when nobody can say what may be deleted. In each of those, more technology makes the problem harder to see.

If the honest answer is that you cannot tell which situation you are in, that is what a short assessment is for. Our Data Governance QuickScan runs for ten working days from £14,500 + VAT and it is designed to answer exactly this question with evidence rather than opinion.

What each side costs and why the confusion is expensive

These two disciplines are bought from different suppliers on different commercial models, which is part of why they get conflated. Management is usually bought as licences plus implementation days, so the cost is visible and the value is assumed. Governance is bought as people and decisions, so the cost is visible and the value is questioned.

What you are buyingWhich disciplineOur published floor
Evidence on where the real problem sits, in ten working daysGovernanceData Governance QuickScan from £14,500 + VAT
The operating model built on critical domains with the people who will run itGovernanceData Governance Foundations from £45,000 + VAT over three to nine months
Senior data leadership without a permanent hireGovernance and directionVirtual CDO from £7,500 + VAT per month
The governance function run for you month by monthGovernanceData governance as a service from £9,500 + VAT per month
A senior data lead inside a live programmeBoth, at the joinProject DG from £22,000 + VAT per month
Target architecture for a data or AI platformManagement, decided properlyEA for data and AI platforms from £14,500 + VAT

We do not quote platform licences, warehouse costs or engineering build rates, because we do not sell them and any figure we invented would be guesswork. What we will say is that UK data governance day rates commonly run from £1,100 to £2,400 per day, which is published on our own assessment page and is the reason we sell fixed fees instead. Our guide to data governance cost in the UK breaks the governance side down further.

The expensive version of this confusion has a familiar shape. An organisation buys a catalogue or a quality tool to solve a definitions problem. The tool works exactly as sold. Eighteen months later the catalogue has three competing entries for customer, because the missing thing was never software.

How regulators and AI treat the two differently

Regulation lands mostly on the governance side, because what regulators ask for is accountability and evidence rather than architecture. The ICO guidance on accountability and governance is explicit that being able to demonstrate compliance is part of the obligation, and demonstration requires named responsibility and records. A well engineered platform with nobody accountable for it does not answer that.

Quality sits at the join. The Government Data Quality Framework is a useful public reference precisely because it pairs measurement, which is management work, with ownership and accountability, which is governance work. The ONS material on quality in official statistics makes the same pairing from a different angle.

AI raises the stakes on the governance side specifically. A model inherits whatever the data already is, and the questions that stop AI projects are permission questions rather than pipeline questions. Whether this data may be used for this purpose, who decided, and on what basis. Our guides on data governance as the foundation of safe AI and the EU AI Act for UK companies cover where those obligations land.

Six questions that settle this in one meeting

  1. Name the person who approves the definition of our most argued about metric. If no name comes back, the gap is governance regardless of what else is being proposed.
  2. For the last three data problems we escalated, was the fix a person or a mechanism? The mix tells you where your actual weakness is, with no consultant required.
  3. What decision does this budget request close? Management requests should name a capability and a date. Governance requests should name decisions and owners. A request that names neither is not ready.
  4. If we bought the tool being proposed, who would maintain what it contains, in whose working week? The most common failure in this market is a populated catalogue with no owner.
  5. Could we answer a regulator on ownership, access and retention today, without starting a project? If not, that is governance, and technology will not shorten the answer.
  6. Which of our data problems would survive a perfect platform? Every problem on that list is governance. It is usually the shorter list and the more expensive one to ignore.

Where Intelance fits and where it does not

We are a specialist advisory and assurance firm. Data governance sits alongside enterprise architecture, cyber assurance, ISO certification support and AI governance, which matters here because the governance and management split runs straight through all of them.

What we do. We establish where the real problem sits in ten working days, build the operating model with the people who will run it, provide senior data leadership on a fractional basis, run the governance function month by month where that is wanted, and set the target architecture for data and AI platforms so the management side is decided properly. Fees are published as floors and fixed in writing before work starts.

What we do not do. We are not a data engineering firm. We do not build pipelines, run warehouses, write transformation code or provide managed platform operations. We sell no software licences and take no vendor commissions, which is why our advice can end with a recommendation to buy nothing. If what you need is engineering delivery capacity, we will say so and we are happy to work alongside the firm that provides it.

If you recognise your organisation in the symptom table, the useful next step is short and fixed. Read the plain explanation of data governance if you want the ground beneath this article, the implementation framework if you have already decided, or the guide to choosing a data governance firm if you are comparing suppliers. When you are ready, speak to a senior practitioner and bring the two reports that disagree.

Frequently asked questions

What is the difference between data governance and data management?

Data management is the work of moving, storing, modelling, protecting and serving data. Data governance is the work of deciding who may decide things about it, including definitions, ownership, access, quality thresholds and retention. The practical test is to ask what form the answer to a question takes. If the answer is a named person, it is governance. If the answer is a tool or a pipeline, it is management.

Is data governance part of data management, or the other way round?

Recognised bodies of knowledge treat governance as one area within the wider discipline of data management, and that is defensible on paper. In practice they behave differently enough to be run separately, because one is a set of decision rights held by business people and the other is an engineering capability. Organisations that fold governance into an engineering function usually end up asking engineers to make business definitions, which does not work.

Which should we invest in first?

It depends on the symptom. Fund the platform first when it is genuinely unreliable, when a migration is already committed with a date, or when there is no shared data to govern yet. Fund governance first when numbers are disputed, an audit finding is open, an AI initiative is blocked on permission, two teams claim the same data, or nobody can say what may be deleted. If you cannot tell, a short assessment answers it with evidence.

Can a tool deliver data governance?

No, although a tool makes governance easier to sustain once the decisions exist. Catalogues, quality platforms and lineage tools record and enforce decisions that people have already made. Bought before the decisions, they fill up with competing entries and stop being trusted. Ask who will maintain the contents, in whose working week, before signing.

How much does each side cost?

Our governance work starts from £14,500 + VAT for a ten working day assessment, from £45,000 + VAT to build the operating model over three to nine months, from £7,500 + VAT per month for a Virtual CDO and from £9,500 + VAT per month for the governance function run for you. UK data governance day rates commonly run from £1,100 to £2,400 per day. We do not quote platform licences or engineering build costs because we do not sell them.

Who should own data governance?

A named executive owns the operating model, and named business data owners own individual domains. Technology implements what those owners decide. Governance placed inside a technology function without business owners tends to stall, because the decisions it needs to make are commercial decisions about meaning and risk rather than technical ones.

Does the ICO expect data governance specifically?

UK data protection law requires organisations to be able to demonstrate compliance, which is why the ICO writes about accountability and governance together. Demonstrating it needs named responsibility, records of decisions and evidence that both are applied. That is governance work. A well built platform with nobody accountable for what it contains does not satisfy the requirement.

Do we need both before we start using AI?

You need enough of both, focused on the data the AI will consume. On the governance side that means classification, a decision on permitted use and a named owner for each dataset in scope. On the management side it means measured quality on the specific fields the model reads. Neither needs to be complete across the whole estate before a first use case, and waiting for completeness is how AI programmes lose a year.

Written by Emmanuel Olatunji, Chief Enterprise Architecture Partner at Intelance. Intelance advises UK boards and executive teams on data governance, enterprise architecture, cyber assurance and AI governance, with published fees and senior delivery. Last reviewed 26 July 2026.

Emmanuel Olatunji

Emmanuel Olatunji

Chief Enterprise Architecture Partner

Emmanuel founded Intelance in 2017 and has led architecture, AI governance, cyber and deal engagements across the UK, Europe, the Middle East and Africa. Every Intelance engagement runs under his direction, and every guide he publishes comes from that work.

See his record on LinkedIn About Intelance

Talk to us about your data governance

Thirty minutes with a senior adviser. A clear view of where to start, what it costs and what your team can run themselves.

Talk to a senior adviser

+44 20 3985 5809  ·  info@intelance.co.uk