data stewardship
Institutional practices for curating, maintaining and controlling datasets.
How the laws define this
Data stewardship universally centers on defining roles, responsibilities, and practices for curating, managing, and controlling access to datasets while maintaining compliance with relevant privacy and data protection rules. Every instrument emphasizes governance, data quality, and controlled access. However, these frameworks diverge significantly regarding regulatory scope and institutional context. The MeitY report establishes a national framework requiring data stewards to be formally accredited and held to standardized governance and operational rules. Conversely, the Cadru Strategic Național în domeniul Inteligenței Artificiale (CSN-IA) focuses specifically on datasets used for AI systems, linking stewardship to interoperability, dataset reuse, GDPR compliance, and shared responsibilities among controllers, processors, and stewards. Meanwhile, the Consorcio / Alianza en Inteligencia Artificial (CONACYT) limits its scope exclusively to datasets used or produced within its specific consorcio projects, incorporating institutional policies and mandatory ethical review alongside Mexican data protection obligations.
Synthesised from the 3 statutory definitions below. Each one is quoted in full, with its source.
How jurisdictions differ
What is distinctive in each definition, binding law in force first.
| Jurisdiction | Instrument | Status | What is distinctive |
|---|---|---|---|
| India | Report of the Committee on Platforms and Data on Artificial Intelligence (MeitY report) | Adopted | Adds accreditation of data stewards and adherence to operational and governance standards under a proposed national framework. |
| Mexico | Consortium/Alliance on Artificial Intelligence | In Force | Limits to responsibilities for datasets used or produced by consorcio projects, emphasizing ethical review alongside access control and compliance. |
| Romania | National Strategic Framework for Artificial Intelligence | Adopted | Highlights ensuring interoperability and lawful processing with explicit assignment to data stewards, controllers, and processors for GDPR compliance. |
What it triggers
- In the MeitY report, data stewards are to be accredited and held to operational and governance standards under the proposed national framework.source
Definitions (3)
The practices, roles and institutional arrangements responsible for curating, maintaining, documenting and controlling access to datasets, including responsibilities for metadata, quality metrics, licensing and compliance with privacy and sectoral rules. Data stewards are to be accredited and held to operational and governance standards under the proposed national framework.
Responsibilities for managing, governing, and protecting datasets used or produced by consorcio projects in accordance with Mexican data protection rules and institutional policies, including duties for access control, ethical review, and compliance with relevant data handling obligations.
A role and set of practices that ensure the curation, quality, access controls, interoperability and lawful processing of datasets used for AI systems, assigning responsibilities to data stewards/controllers/processors to support reuse, governance and GDPR compliance.
Not to be confused with
Data steward refers specifically to the operational manager role for data quality and metadata, while data stewardship encompasses broader practices, roles, and arrangements.
Data trustee is a neutral intermediary managing rights, consent, and access, whereas data stewardship involves institutional practices for curating and controlling datasets.
Questions and answers
What accreditation is required for data stewards?
The MeitY report specifies that data stewards are to be accredited and held to operational and governance standards under the proposed national framework.
What duties apply to data stewardship in Mexican AI consortia?
It includes responsibilities for managing, governing, and protecting datasets used or produced by consorcio projects, with duties for access control, ethical review, and compliance.
How does data stewardship support GDPR compliance?
The Romanian framework assigns responsibilities to data stewards, controllers, and processors to ensure curation, quality, access controls, interoperability, and lawful processing of datasets.
Related Terms
data steward
Operational manager for data quality and metadata....
Data Custodians
Entities responsible for managing and provisioning datasets securely....
Data trust
Mechanism for trusted sharing and reuse of public-sector data....
public sector data governance
Rules and mechanisms for managing and sharing public data....
data trustee
Neutral intermediary managing rights, consent and access....