Governance

data holder

Authority that legally collects and maintains a dataset.

How the laws define this

Both sources establish that a data holder is a party exercising legal authority and control over a dataset to manage access and compliance. Crucially, they agree that this role provides the legal standing required to dictate how data is handled. However, the instruments diverge on who can hold this status and the explicit focus of their obligations. The National Data Governance Strategy (Nacionālā datu pārvaldības stratēģija) - (in development) restricts data holders to an authority or body, framing their responsibilities around legally collecting, maintaining, and retaining primary accountability for dataset quality, access decisions, and regulatory compliance. In contrast, ISO/IEC 5259-1:2024 - Artificial intelligence — Data quality for analytics and machine learning (ML) — Part 1: Overview, terminology, and examples expands eligibility to include individuals alongside entities, focusing primarily on their authority to grant permission for other parties to process or utilize the dataset under specified conditions within data sharing frameworks.

Synthesised from the 2 statutory definitions below. Each one is quoted in full, with its source.

What it triggers

ISO/IEC 5259-1:2024 defines this role as key in data sharing and governance frameworks.source

Definitions (2)

An authority or body that legally collects, maintains and is officially responsible for a dataset; data holders retain custody and primary accountability for dataset quality, access decisions and compliance with applicable legal and policy requirements.

National Data Governance Strategy (Nacionālā datu pārvaldības stratēģija) - (in development)Definition 1 of 2

Refers to the entity or individual that possesses the legal authority and control over a dataset, enabling them to grant permission for other parties to process or utilize that data under specified conditions. This role is key in data sharing and governance frameworks.

ISO/IEC 5259-1:2024 - Artificial intelligence — Data quality for analytics and machine learning (ML) — Part 1: Overview, terminology, and examplesDefinition 2 of 2

Not to be confused with

data owner

Data owner is the official accountable for data value and classification, while data holder focuses on legal collection, maintenance, and control of the dataset.

Data controller

Data controller determines the purposes and means of processing personal data, whereas data holder legally collects, maintains, and is responsible for the dataset itself.

Questions and answers

What permissions can a data holder grant?

The data holder possesses legal authority to grant permission for other parties to process or utilize the dataset under specified conditions. This role supports data sharing frameworks.

How does data holder relate to data governance?

In ISO/IEC 5259-1:2024, it is a key role in data sharing and governance frameworks for AI and ML data quality. Latvia's strategy guides public data holders on sharing rules and privacy.