What is data management?
Definition
Data management is the planning, policies and day-to-day practices an organization uses to handle its data, from collection to deletion, so the data stays accurate, protected and useful.
- Category
- Data
- Also called
- data management meaning
- Last updated
NIST's glossary, quoting CNSSI 4009, defines data management as the development, execution and supervision of plans, policies, programs and practices that deliver, control, protect and enhance the value of data and information assets throughout their lifecycles. In plain terms: deciding what data a business keeps, where it lives, who can see it and when it gets deleted.
What it covers
NIST's entry on data processing lists the life cycle stages: collection, retention, logging, generation, transformation, use, disclosure, sharing, transmission and disposal. Good data management has a plan for each stage. That usually means:
- knowing what data the organization holds and where
- limiting who can access it
- keeping it accurate
- deleting it when there is no reason to keep it
An example
A clinic collects a patient's name, date of birth and test results. Data management decides which staff can open the record, how long it is kept, how it is backed up and how it is destroyed after the retention period ends.
Why it matters to you
You don't run a company's data management, but it decides what happens to your information once you hand it over. Sloppy handling is how old records survive for years, get copied into spreadsheets and end up in breaches. Companies that delete what they no longer need leave less behind to leak or sell.
Data management vs. related terms
- Data governance sets the rules and who is accountable. Data management carries them out.
- Data privacy is about handling personal data fairly. Data management is wider and also covers non-personal data such as sales figures.
How to protect yourself
- 1
Ask what a company keeps
Send a data subject access request to find out what an organization holds about you, and ask it to delete data it no longer needs.
- 2
Give less in the first place
Skip optional form fields and use a separate email address for sign-ups you don't trust.
- 3
Check retention in the privacy policy
Look for how long data is kept. A vague 'as long as necessary' is a reason to ask for specifics.
- 4
Clean up your own accounts
Delete accounts and apps you no longer use. Each one is data someone else has to manage.
See where your personal data is exposed
Serus finds it on data brokers and people-search sites and removes it.
Frequently asked
What are the main parts of data management?
Collecting data, storing it, keeping it accurate, controlling who can use it, sharing it safely and deleting it when it is no longer needed.
What is the difference between data management and data governance?
Governance sets the policies and responsibilities. Management is the work of applying them to real data.
Why does data management matter for privacy?
Because it determines how long your information is kept, who can see it and how well it is protected.
Sources
Something wrong or out of date? Tell us and we'll re-check it.