Research Data Governance: The Owning vs. Holding Divide

Most universities and research centers sit on a paradox. They possess vast quantities of valuable research data—clinical trial results, longitudinal surveys, sensor outputs, and institutional knowledge—yet they rarely behave as the owners of that data. They store it, manage it, and occasionally analyze it, but they do not govern it as the strategic asset it has become.

This distinction between holding data and owning data is not a matter of semantics. It determines whether an institution can leverage its research output for competitive advantage, regulatory compliance, and long-term value creation—or whether it remains a passive custodian of information that others will eventually exploit.

Research data has shifted from being a byproduct of academic inquiry to being a primary driver of institutional value. Funding bodies require robust data management plans. Industry partners seek datasets with clear provenance and usage rights. Regulatory frameworks demand demonstrable governance over sensitive information.

When an institution merely holds data without asserting ownership, it accepts several compounding risks:

Loss of control over how institutional knowledge is used, shared, and monetized

Compliance exposure from an inability to demonstrate data lineage and accountability

Missed strategic value as the gap widens between those who manage data as an asset and those who treat it as a storage burden

The cost of passive custody becomes visible only when a critical moment arrives: a data breach, a partnership negotiation, a funding audit, or a researcher's departure taking institutional knowledge with them.

The ownership problem is particularly acute in academia for structural reasons. Research data often originates from individual investigators who control their own datasets, funded by grants held by the institution, supported by infrastructure paid for by the university. Without explicit governance frameworks, the question of who actually owns the data—the researcher, the funder, or the institution—remains unanswered.

Traditional institutional stances have been passive for understandable reasons: academic culture favors open sharing and individual investigator autonomy. But this passivity is no longer tenable when institutions are expected to monetize knowledge transfer, protect intellectual property, and demonstrate research impact.

Moving from passive custody to active ownership requires more than a data management policy. It demands a governance structure that operates at the intersection of technology, policy, and institutional leadership.

High-quality research data governance is characterized by:

Defined ownership structures. The institution establishes clear rules about who holds custodial responsibility, who has decision rights over data use, and how those rights transfer when personnel change.

Standardized data quality processes. Ownership includes the obligation to maintain data as a reliable, re-usable asset. This means consistent metadata standards, quality validation, and preservation protocols.

Value realization mechanisms. Institutions that own their research data can identify which datasets have strategic value, whether for future research, commercial partnership, or regulatory demonstration of societal impact.

Auditability and accountability. Assertive governance means the institution can demonstrate data lineage, explain its decision-making over data use, and evidence compliance with applicable standards.

The strategic implication is clear: research data governance is not an IT issue or a library function. It requires leadership-level attention because it determines institutional positioning and risk exposure.

Decision-makers should be asking three questions:

First, does the institution have a mechanism for assessing which datasets carry strategic value?

Without an inventory that classifies data by quality, sensitivity, and future potential, ownership remains abstract.

Second, can the institution evidence its governance practices to external stakeholders?

Funders, partners, and auditors increasingly expect demonstrated governance, aligned with recognized standards.

Third, is there a bridge between governance principles and operational capabilities?

Many institutions have policy documents that are disconnected from day-to-day data management practice. Effective governance operates at both levels.

Institutions serious about claiming ownership of their research data need both a governance framework and an operational mechanism that turns principles into practice. The framework alone produces documentation; the operational mechanism produces change.

IDM's book, Navigating Research Data Governance, addresses this gap directly for leaders who recognize urgent issues within their research data landscape. Rather than presenting governance as a theoretical or aspirational exercise, it maps the journey from passive custody to active ownership, covering the current state of fragmented ownership, the urgency of reform, and the mechanisms that make governance operational.

For institutions moving from recognizing that their research data has strategic value to building the capacity to govern it, the book provides the conceptual foundation. It also demonstrates how governance principles can be embedded in technical infrastructure rather than remaining abstract policy language. This alignment between data governance and cloud-based implementation is the practical difference between an institution that holds data and one that owns it.