Top

Published in:

2021 | OriginalPaper | Chapter

5. Data Governance and Compliance

Author : Rupa Mahanti

Published in: Data Governance and Compliance

Publisher: Springer Singapore

Activate our intelligent search to find suitable subject content or patents.

search-config

AI-assisted search

Off

Abstract

One of the main business drivers of data governance is compliance. Compliance is about following laws and rules to prevent wrong things from happening as well as detecting and mitigating incorrect actions of the past. Regulations have made organizations much more aware of the issues regarding the data they hold. With new regulations coming into the picture and old ones being repeatedly revised, it is imperative to plan for the future and to implement best practices in data governance to stay compliant and achieve better performance.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

über 102.000 Bücher
über 537 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Finance + Banking
Management + Führung
Marketing + Vertrieb
Maschinenbau + Werkstoffe
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

inform now

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 390 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Maschinenbau + Werkstoffe

Jetzt Wissensvorsprung sichern!

inform now

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 340 Zeitschriften

aus folgenden Fachgebieten:

Bauwesen + Immobilien
Business IT + Informatik
Finance + Banking
Management + Führung
Marketing + Vertrieb
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

inform now

previous chapter Regulations

next chapter Data Governance and Compliance: Concluding Thoughts and the Way Ahead

AOGLLP https://www.aogllp.com/class-action-blog/taco-bell-agrees-to-25m-overtime-class-action-settlement#ixzz35dq9Y2EW Accessed June 7 2020

Baker S, Sjoberg P (2018) Intelligent data governance for Dummies®, Hitachi Vantara Special Edition. John Wiley & Sons, Inc.

BBC (2013) Barclays fined $3.75m after record-keeping failure, from BBC News. www.bbc.co.uk/news/business-25525621 Accessed 10 Jan 2018

BBC News (2018) Greenwich University fined £120,000 for data breach. BBC News-Technology. https://www.bbc.com/news/technology-44197118 Accessed 31 May 2018

BCBS Basel Committee on Banking Supervision (2013) Principles for effective risk data aggregation and risk reporting, © Bank for International Settlements 2013. https://www.bis.org/publ/bcbs239.pdf. ISBN 92-9197-913-9. (January, 2013)

BitSight Tech (2018) A risk manager’s guide to the general data protection regulation (GDPR). www.bitsighttech.com

Blackmore N (2019) How to avoid pulling a Google and copping a $80 million fine for data misuse. Smart Company-Startup Advice. https://www.smartcompany.com.au/startupsmart/advice/google-80-million-fine-data-misuse-gdpr/ Accessed 20 May 2020

Brunelli M, Poor reference data management causing headaches in financial sector, TechTarget, E-guide, Bloomberg Vault. https://docs.media.bitpipe.com/io_10x/io_108208/item_640879/Bloomberg_sDataManagement_IO%23108208_E-Guide_021813.pdf Accessed 20 May 2020

Burgett A (2018) The cost of GDPR non-compliance: fines and penalties. KirkpatrickPrice Blog. https://kirkpatrickprice.com/white-papers/cost-gdpr-non-compliance-fines-penalties/ Accessed 10 Dec 2018

Carter J (2016) Beyond the Atlantic: data privacy laws around the world. Techradar.Com. https://bit.ly/2PuoCyR Accessed 26 Mar 2019

Chandler S (2019) Crypto is tightening up its anti-money laundering game, While Banks are still being fined for non-compliance. https://cointelegraph.com/news/crypto-is-tightening-up-its-anti-money-laundering-game-while-banks-are-still-being-fined-for-non-compliance Accessed 10 May 2019

Chatterjee D (2018) It’s getting expensive not to be compliant. IBM RegTech Innovations. IBM Blogs. https://www.ibm.com/blogs/insights-on-business/banking/getting-expensive-not-compliant/ Accessed 10 May 2018

Cohen JK (2018) 3 major HIPAA fines so far in 2018, Becker’s Health IT and CIO Report. https://www.beckershospitalreview.com/cybersecurity/3-major-hipaa-fines-thus-far-in-2018.html Accessed 10 Dec 2018

Collins A, Lightbourne J (2018) The U.S. Department of Health and Human Services Settles with Anthem for Record $16M Over Alleged HIPAA Violations, Cleary Enforcement Watch. https://www.clearyenforcementwatch.com/2018/10/u-s-department-health-human-services-settles-anthem-record-16m-alleged-hipaa-violations/ Accessed 10 May 2019

Cornerstone on Demand (2014) Manufacturing insights–5 workforce challenges and how top organizations solve them. https://www.cornerstoneondemand.com/sites/default/files/whitepaper/csod-wp-manufacturing-insights-072014.pdf Accessed 10 May 2019

DalleMule L, Davenport TH (2017) What’s your data strategy? Havard Business Review. https://hbr.org/2017/05/whats-your-data-strategy Accessed 1 Dec 2018

Data Republic (2018) GDPR, CCPA and what they means for data governance-Data Republic

Difference Between (2019) Difference between Data Protection and Data Security. https://www.differencebetween.info/difference-between-data-protection-and-data-security Accessed 1 May 2020

erwin (2017) State of data governance report. https://go.erwin.com/2018-state-of-data-governance-report Accessed 28 Dec 2018

FDA et al (2018) U.S. Department of Health and Human Services Food and Drug Administration, Center for Drug Evaluation and Research (CDER), Center for Biologics Evaluation and Research (CBER), Center for Veterinary Medicine (CVM), December 2018. Data Integrity and Compliance With Drug CGMP: Questions and Answers Guidance for Industry, Pharmaceutical Quality/Manufacturing Standards (CGMP) https://www.fda.gov/media/119267/download Accessed 10 Jan 2019

Fearn N (2015) Carphone warehouse hit with 400k fine for 2015 data breach. IT Pro UK. https://www.itpro.co.uk/data-protection/30266/carphone-warehouse-hit-with-400k-fine-for-2015-data-breach Accessed 3 May 2018

Franco J-M (2018) BCBS 239, GDPR: Why must banks focus on data governance? Big Data and Digital Blog, Business and Decision. https://en.blog.businessdecision.com/bigdata-en/2018/02/bcbs-239-gdpr-must-banks-focus-data-governance/ Accessed 3 May 2018

Glenday J (2013) Sony fined £250k over ‘serious’ Data Protection Act breach. The Drum. https://www.thedrum.com/news/2013/01/24/sony-fined-250k-over-serious-data-protection-act-breach Accessed 10 Feb 2013

Gow B (2006) Case study: Data Governance & Compliance for Financial Services, IBM

Guess R (2011) What the Dodd-Frank Act may mean for DG in the financial sector. DataVersity. https://www.dataversity.net/what-the-dodd-frank-act-may-mean-for-dg-in-the-financial-sector/

Hall C (2016) Risk and regulatory reporting: centralisation is not the answer. Financial Markets Insights, The Realization Group. https://www.therealizationgroup.com/wp-content/uploads/2018/01/13-FMI-Risk-and-regulatory-reporting-160217.pdf Accessed 20 April 2018

[https://www.risk.net/risk-management/5781976/regulators-bristle-at-slow-progress-on-bcbs-239]

IAPP (2019) The international association of privacy professionals. Glossary of Privacy Terms. https://iapp.org/media/pdf/resource_center/IAPP_Privacy_Certification_Glossary_v2.0.0.2.pdf. Accessed 20 April 2019

ICO (2018) Bupa fined £175,000 for systemic data protection failures. https://ico.org.uk/about-the-ico/news-and-events/news-and-blogs/2018/09/bupa-fined-175-000-for-systemic-data-protection-failures/ Accessed 20 April 2019

ICO (2019) Information Commissioner’s Office, The Guide to the General Data Protection Regulation (GDPR). https://ico.org.uk/media/for-organisations/guide-to-the-general-data-protection-regulation-gdpr-1-0.pdf Accessed 19 May 2019

Isidore C (2012) Standard chartered fined $327 million for violating sanctions. CNN Business. https://money.cnn.com/2012/12/10/investing/standard-chartered-sanctions-iran/index.html

i-Sight (2018) A practical guide to data privacy laws by Country. https://i-sight.com/resources/a-practical-guide-to-data-privacy-laws-by-country/

Jaclyn J (2008) Report: financial firms fined $26B for AML, sanctions, KYC non-compliance since 2008. Compliance Week. https://www.complianceweek.com/blogs/enforcement-action/financial-firms-fined-26b-for-aml-sanctions-kyc-non-compliance-since-2008 Accessed 1 Dec 2018

Keumars Afifi-Sabet NEWS (2018) Equifax hit with maximum £500,000 fine after massive security breach, ITPRO. https://www.itpro.co.uk/data-protection/31950/equifax-hit-with-maximum-500000-fine-after-massive-security-breach Accessed 1 Dec 2018

KPMG Advisory NV (2018) Enterprise data management-data retention. https://assets.kpmg/content/dam/kpmg/nl/pdf/2018/advisory/data-retention.pdf Accessed 31 Dec 2018

Lustig M (2014) Compliance at speed. O'Reilly Media, Inc

Maindarkar A, Thykatt R (2014) Seven steps to effective enterprise-wide compliance. Infosys White Paper

Martijn N, Hulstijn J, Bruijne M, Tan Y-H (2015) Determining the effects of data governance on the performance and compliance of enterprises in the logistics and retail sector, pp 454–466. https://doi.org/10.1007/978-3-319-25013-7_37

McDowall RD (2018) Data integrity and data governance: practical implementation in regulated laboratories. Royal Society of Chemistry

Merkulov P (2017) Data security & privacy: the risks of not playing by the rules. Dark Reading, Informa PLC. https://www.darkreading.com/risk/data-security-and-privacy-the-risks-of-not-playing-by-the-rules/a/d-id/1328951

Merkulov P (2018) The staggering costs of non-compliance, SC Magazine. https://www.scmagazine.com/home/opinions/blogs/executive-insight/the-staggering-costs-of-non-compliance/ Accessed 28 Dec 2018

Nilfisk (2016) Compliance for food manufacturers: the high cost of doing nothing. Industrial Vacuum Blog. https://news.nilfiskcfm.com/2016/10/compliance-for-food-manufacturers-the-high-cost-of-doing-nothing/ Accessed 02 May 2020

O’Hara M (2018) Risk and regulatory reporting: centralisation is not the answer. The Realization Group. https://www.therealizationgroup.com/portfolio/risk-and-regulatory-reporting-centralisation-is-not-the-answer/ Accessed 31 Dec 2018

OMB Memorandum M-07-16 (2007) Safeguarding against and responding to the breach of personally identifiable information

Ouellette P (2014) HHS deals out largest-ever $4.8M HIPAA violation settlement. Health IT Security. https://healthitsecurity.com/news/hhs-deals-out-largest-ever-4-8m-hipaa-violation-settlement

Pappu R (2018) Data governance–understanding its importance for AML compliance. ACA Telavance Blog. https://www.acacompliancegroup.com/blog/data-governance-%E2%80%93-understanding-its-importance-aml-compliance Accessed 28 Dec 2018

PCI SSC (2010) PCI security standards council, October, 2010. PCI DSS Quick Reference Guide

PharmaCompass (2017) 2016—A year of data integrity issues and pharma non-compliances. The PharmaCompass Newsletter. https://www.pharmacompass.com/radio-compass-blog/2016-a-year-of-data-integrity-issues-and-pharma-non-compliances Accessed 28 Dec 2017

Ponemon Institute LLC, Sponsored by Globalscape (2017) The true cost of compliance with data protection regulations. https://dynamic.globalscape.com/files/Whitepaper-The-True-Cost-of-Compliance-with-Data-Protection-Regulations.pdf Accessed 28 Dec 2018

Price E (2019) France Fines Google $57 Million for GDPR violations. https://fortune.com/2019/01/21/france-fines-google-57-million-for-gdpr-violations/ Accessed 1 Dec 2019

PricewaterhouseCoopers (2017) Anti-money laundering and counter-terrorism financing: from compliance to confidence. https://www.pwc.com.au/consulting/assets/anti-money-laundering-2017.pdf Accessed 1 Jan 2019

Raval T (2018) KYC and AML: What all banks need to know. Forbes Technology Council, Forbes. https://www.forbes.com/sites/forbestechcouncil/2018/10/11/kyc-and-aml-what-all-banks-need-to-know/#4bf65e1770fc

Reid D (2018) UK watchdog fines Facebook $644,000 for failing to protect its users’ data. CNBC. https://www.cnbc.com/2018/10/25/uk-watchdog-fines-facebook-644000-for-failing-to-protect-user-data.html

Rodionova Z (2016) TalkTalk given record fine over data breach that led to data theft of nearly 157,000 customers. Independent News. https://www.independent.co.uk/news/business/news/talktalk-fine-data-breach-theft-customers-information-stolen-record-penalty-a7346316.html

Rouse M. Data retention policy. TechTarget. https://searchdatabackup.techtarget.com/definition/data-retention-policy

Spitzer J (2008) HIPAA through the years: 5 biggest fines since 2008. https://www.beckershospitalreview.com/cybersecurity/hipaa-through-the-years-5-biggest-fines-since-2008.html

TOC_HIT. The office of the national coordinator for health information technology guide to privacy and security of health information, Version 1.0 022112, https://www.healthit.gov/sites/default/files/pdf/privacy/onc_privacy_and_security_chapter4_v1_022112.pdf

Warman M (2013) Sony pays £250,000 PSN hack fine. The Telegraph. https://www.telegraph.co.uk/technology/sony/10180338/Sony-pays-250000-PSN-hack-fine.html

Westin AF (1967) Privacy and freedom. Atheneum, New York, p 7

Wiki-PCI-DSS. Payment card industry data security standard. https://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Security_Standard

Yu E (2019) January 15, 2019, Firms fined $1M for SingHealth data security breach. ZDnet. https://www.zdnet.com/article/firms-fined-1m-for-singhealth-data-security-breach/

Title: Data Governance and Compliance
Author: Rupa Mahanti
Publisher: Springer Singapore
Book: Data Governance and Compliance
Print ISBN: 978-981-336-876-7

Electronic ISBN: 978-981-336-877-4

Copyright Year: 2021
DOI: https://doi.org/10.1007/978-981-33-6877-4_5

Springer Professional

Abstract

Please log in to get access to your license.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Springer Professional "Technik"

Springer Professional "Wirtschaft"

Premium Partner