UPPS 04.02.05 - Data Governance Program
Data Governance Program
UPPS No. 04.02.05
Issue No. 5
Effective Date: 1/05/2024
Next Review Date: 6/01/2027 (E3Y)
Sr. Reviewer: Assistant Vice President for Data, Analytics, and Institutional Research
POLICY STATEMENT
Texas State University is committed to maintaining a data governance program to ensure accountability and responsibility for the quality, security, and appropriate use of data.
BACKGROUND INFORMATION
University data are institutional assets integral for informed decision- making in support of Texas State University’s mission. The administrative and academic units must serve as stewards of these data, working together to properly manage and protect these assets. Therefore, a centralized approach to data management must be in place to ensure consistency in data quality, availability, access, and reporting.
This policy outlines the objectives of the Data Governance Program as required by Section 2054.137 of the Texas Government Code. The policy defines the structure and responsibilities of the governing entities allowing for effective and efficient management and use of university data. The Data Governance Program provides a centralized mechanism to:
promote data and information quality through widely accepted data and reporting standards, definitions, documentation, and best practices;
provide access to data in an efficient and effective manner in compliance with university policies related to data security and privacy;
communicate data quality and reporting initiatives across the institution;
assign ownership responsibility and accountability for university data to ensure effective stewardship;
empower the data owner, in collaboration with the data management council and its sub-committees, to develop and enforce policies and procedures that promote consistent data management and reporting for informed decision-making; and
ensure compliance with relevant state and federal laws related to data management.
PRINCIPLES
Adherence to certain principles is key to the success of the Data Governance Program. These principles include:
Transparency – Data governance processes will exhibit transparency; it should be clear to all participants and auditors how and when data-related decisions and controls were introduced into the processes.
Auditability – Data-related decisions, processes, and controls subject to the Data Governance Program will be auditable; they will be accompanied by documentation to support compliance-based and operational auditing requirements.
Accountability – The program will define accountabilities for data-related decisions, processes, and controls.
Stewardship – The program will strive for the responsible and ethical governance of data.
SCOPE
The Data Governance Program will support the business objectives of Texas State, addressing data ownership, stewardship, integrity, access, privacy, privacy classification, and reporting for all Texas State data including, but not limited to, student, faculty, human resources, finance, facilities, and alumni or donor data elements, wherever they reside.
The management of data elements related to police, medical, counseling, legal, and disability records is the responsibility of each element’s respective institutional data owner; notwithstanding, these elements are subject to governance under this policy and additional requirements as ascribed by the university, Texas State University System (TSUS) Rules and Regulations, and applicable law.
This policy applies to all individuals whose affiliation with Texas State requires or permits access to university data, without regard to the manner, form, duration, or location of access.
Matters of data security are key to any data governance program and addressed in Section 04.01, Computing Services, of the university Policy and Procedures Statements (PPS) website.
Policies regarding proper management and retention of records are addressed in UPPS No. 01.04.32, University Records Management.
DEFINITIONS
Data Asset – an object comprised of data elements, which could be logical or physical.
Data User – an authorized user, as defined by UPPS No. 04.01.11, Risk Management of Information Resources, who accesses university data in performance of their assigned duties. A data user is expected to be familiar with and abide by all data governance and data security policies and procedures.
Data Custodian – an individual or team charged by the data owner to provide information asset services to data owners and data users.
Data Dictionary – a set of information describing and defining the contents, format, and structure of a database and the relationship among its elements.
Data Element – any defined unit of data.
Data Management – encompasses the people, processes, and technology required to create consistent and proper handling of data and understanding of information across the organization, ignoring the boundaries created by organizational structures.
Data Governance Program – the framework to manage university data effectively, efficiently, and ethically in support of the university’s mission.
Data Owner - an individual responsible for the oversight of an information resource or data asset.
Data Steward – a data custodian responsible for planning, prescribing, and managing the sourcing, use, documentation, and maintenance of data assets. Functional data stewards are required to be knowledgeable regarding data assets in relation to business processes. Technical data stewards are expected to be knowledgeable about the underlying structure and administration of data assets. It is possible that a data steward could have both functional and technical knowledge.
Data Stewardship – the governance, management, and protection of an organization’s data assets that results in high-quality data that are easily accessible and reportable.
Functional Area – a department that represents and serves a particular subset of university data.
Metadata – describes how and when a particular set of data was collected and how the data are formatted, necessary for understanding how data are stored in data warehouses.
Stakeholder – an employee who affects, or would be affected by, data policy or procedural change. A stakeholder requests data, initiates requests for changes to university data, and identifies problems with university data that are impeding normal daily operations. They provide input or feedback that assists with the process of satisfying any change request.
Subject Matter Expert (SME) – any employee with extensive knowledge of given functional, technical, reporting, or security-related data issues.
University Data – any data element stored or used in the management and operation of Texas State.
ROLES AND RESPONSIBILITIES
Roles and duties under the Data Governance Program are considered part of regular job duties assigned to university employees.
The Data Governance Program establishes the structure and roles needed for effective data governance as well as a Data Management Council to oversee management of the program and direct activities in support of the university mission. The Data Management Council consists of a leadership team and ex officio members determined by positions held within the university, as well as divisional representatives appointed by the vice president for each division.
The Data Management Council Leadership Team is comprised of the council chair, council co-chair, a lead technical data steward, and a lead functional data steward.
The role of council chair will be filled by the assistant vice president for Data, Analytics, and Institutional Research, who serves as the Chief Data Management Officer for the university and shares the managerial function with the executive sponsors and other members of the Data Management Council.
The role of council co-chair will be filled by a data management analyst from the Office of Data, Analytics, and Institutional Research, who will serve as the deputy Chief Data Management Officer for the university and will share the managerial function with the executive sponsors and other members of the Data Management Council.
The lead technical data and lead functional data steward will be appointed for a one-year term by the Chief Data Management Officer in consultation with executive sponsors based on the needs of the council in support of university goals.
The Chief Information Security Officer, University Archivist and Records Manager, Chief Compliance Officer, and TSUS System Chief Data Officer will serve as ex officio members of the Council.
All divisions, except Academic Affairs, are to appoint one divisional representative to the Data Management Council. Divisional representatives will serve for a one-year term running from September 1 to August 31 and can be re-appointed for consecutive terms. Divisional representatives will function as the lead data steward for their area and chair Divisional Data Management Committees.
The council chair, as Chief Data Management Officer, is responsible for:
providing oversight of the Data Governance Program and Data Management Council;
leading the Data Management Council to ensure the duties and responsibilities of the Council are met;
serving as the institutional representative on the state data management advisory board;
coordinating with the State of Texas Chief Data Officer to ensure the performance of duties assigned under Section 2054.0286 of the Texas Government Code;
arrange posting on the Texas Open Data Portal at least three high-value data sets, as defined by Texas Government Code Section 2054.1265, in partnership with the Texas Higher Education Coordinating Board;
coordinating with the university’s Chief Information Security Officer, University Archivist and Records Manager, and Chief Compliance Officer to ensure state requirements for data governance and management are met; and
serving as an ex officio member on each of the divisional Data Management Committees.
The council co-chair, as Deputy Chief Data Management Officer, is responsible for:
assisting with oversight of the Data Governance Program and Data Management Council;
helping ensure the duties and responsibilities of the Data Management Council are met;
serving as an alternate on the state data management advisory board in the event the Chief Data Management Officer is unable to attend; and
performing other required duties in the absence of the Chief Data Management Officer to ensure compliance with the Texas Government Code.
The lead functional and technical data stewards are responsible for:
assisting with oversight of the Data Management Council;
serving as subject matter experts by providing insight into the use and management of data from the functional and/or technical perspective;
chairing Data Management Council standing sub-committees; and
helping ensure the duties and responsibilities of the Data Management Council standing sub-committees are met.
The Data Management Council is responsible for:
developing data management policies and procedures addressing data privacy, ownership, stewardship, integrity, access, privacy classification, and reporting;
ensuring compliance with state and federal laws related to data management including:
implementing best practices for managing and securing data in accordance with state privacy laws and data privacy classifications;
ensuring the university’s records management programs apply to all types of data storage media;
increasing awareness of and outreach for the university’s records management programs within the agency;
conducting a data maturity assessment of the university’s Data Governance Program.
ensuring adherence to data management policies and procedures;
securing funding for data management activities;
arbitrating escalated data issues;
directing shared data management activities across the university through guidance of data management sub-committees and working groups;
coordinating training and support programs for data users;
developing, maintaining, and documenting data and reporting standards;
identifying and resolving cross-functional data issues;
developing goals and metrics for the data governance program; and
informing stakeholders of important data and reporting issues.
Divisional Data Management Committees are standing sub-committees established to accomplish data management duties within each division.
Each divisional Data Management Committee will be comprised of the divisional representative, as chair, a lead technical data steward, a functional data steward, and additional data stakeholders as deemed appropriate by the divisional vice president or director.
The Chief Data Management Officer will serve as an ex officio member of each divisional Data Management Committee.
Divisional Data Management Committees are charged with:
ensuring adherence to data security, record retention, and data management policies and procedures within the division;
developing data dictionaries for functional areas within the division;
making policy recommendations to the Data Management Council;
identifying and resolving cross functional data issues within the division;
identifying cross divisional functional data issues; and
escalating unresolved issues to the Data Management Council.
Data Management Council standing sub-committees are formed by the Data Management Council, comprised of functional and technical data stewards and SMEs from one or more departments or areas. Sub-committees will be chaired by a member of the Data Management Council, or designee. These sub-committees will be responsible for operational data quality, usage, and reporting within their areas. Specifically, they:
monitor compliance with data-related policies and legal or regulatory requirements, and report any issues of concern to the Data Management Council;
define operational procedures and ensure any maintenance, use, and release of data complies with UPPS No. 04.01.01, Security of Texas State Information Resources;
develop and maintain documentation, including data dictionaries and metadata for data elements;
ensure the university’s records management policies are applied to data in accordance with UPPS No. 01.04.32, University Records Management;
monitor data quality and develop programs and procedures for data quality improvement; and
resolve issues assigned to them by the Data Management Council.
Data Management working groups are temporary work groups, formed by the Data Management Council, to solve a defined data management issue. These can be made up of any combination of data stewards, SMEs, stakeholders, and data users. The charge to Data Management working groups will be defined at the time each is created.
DATA GOVERNANCE PROCEDURES
- All data governance procedures are developed by the Data Management Council and, depending upon the scope, will be added to this section of the Data Governance Program policy or as additional university policy and procedure statements.
REVIEWERS OF THIS UPPS
Reviewers of this UPPS include the following:
Position Date Assistant Vice President for Data, Analytics, and Institutional Research June 1 E3Y Associate Vice President for Technology Resources June 1 E3Y Associate Vice President for Institutional Effectiveness June 1 E3Y
CERTIFICATION STATEMENT
This UPPS has been approved by the following individuals in their official capacities and represents Texas State policy and procedure from date of this document until superseded.
Assistant Vice President for Data, Analytics, and Institutional Research; senior reviewer of this UPPS
Vice President and Chief of Staff
President