Data Management Principle 5 – Lawful Data

"The organisation's information management processes comply with all relevant laws, policies and regulations."

There are a number of legal requirements that govern the use of data in the course of business. These include data protection, financial reporting and other regulatory reporting.

Private companies

Establishing trust and confidence between supplier and customer is an essential strategy for competitive organisations. Customers are more likely to purchase goods and services from organisations that say and show that they keep lawful data.

Public authorities

Public authorities have a clear ethical imperative and world class reputation to maintain, and compliance is an essential business driver.


Organisations must be mindful to comply with laws, regulations, and external policies regarding the collection, retention, and overall management of lawful data.

Education and access to the rules, efficiency, need, and common sense are not the only drivers. Changes in the law and changes in regulations may drive changes in the organisation’s processes or applications.

10 data management principles