Chapter 2 — Why governance matters for a charity | Professional Data governance

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Chapter 2 — Why governance matters for a charity

Lesson map

Lesson 02 published. Map, example, EX006.

flowchart TD
  N0["Learning outcomes"]
  N1["2.1 Mission and trust"]
  N2["2.2 Better decisions"]
  N3["2.3 Legal duties"]
  N4["2.4 Risks of doing nothing"]
  N0 --> N1 --> N2 --> N3 --> N4
  N4 --> EX["Worked example"]
  EX --> Q["Exercise EX006"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["2.1 Mission and trust"]
  N2["2.2 Better decisions"]
  N3["2.3 Legal duties"]
  N4["2.4 Risks of doing nothing"]
  N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX006"]

[Learning outcomes]
    |
    v
[2.1 Mission and trust]
    |
    v
[2.2 Better decisions]
    |
    v
[2.3 Legal duties]
    |
    v
[2.4 Risks of doing nothing]
    |
    v
[Worked example] --> [Exercise EX006]

Learning outcomes

You will (1) explain the benefits of data governance to trustees; (2) link governance to the charity's mission; (3) describe the risks of doing nothing.

2.1 Mission and trust

Mr. Nowak explains that charities depend on trust from donors, clients, volunteers and funders. Donors give because they trust their money and details are handled well. Clients share personal hardship because they trust it will stay private. Grace writes that governance protects this trust by making sure data are accurate, used only as promised and kept safe. She notes that a data breach involving client referrals could stop families seeking help. Grace writes this point at the top of her briefing for trustees, because it connects data to the people the charity exists to help.

2.2 Better decisions

Good data help Northbank decide where to open a new distribution point, which foods to request and when volunteers are most needed. With inconsistent definitions, the charity cannot compare food banks or show funders its impact. Grace explains to trustees that agreed definitions and checks would let them see reliable trends. DAMA-DMBOK2 describes governance as giving authority and control over data so that it serves the organisation's goals. Grace gives trustees an example: with one household definition, they could compare demand across all six food banks for the first time.

2.3 Legal duties

Northbank must follow data protection law. The GDPR requires a lawful basis for each use of personal data, extra conditions for special category data, security, limits on keeping data and responses to people's requests. Fundraising emails need consent under electronic marketing rules. Grace lists the duties that apply and notes that failing them could lead to complaints, regulatory action and harm to the charity's reputation, which matters greatly for donations. She shares the list with the trustees and asks the chair to confirm who will check that each duty is met.

2.4 Risks of doing nothing

Grace lists risks: referral forms lost from an unlocked cabinet, a volunteer's phone with client numbers stolen, donors emailed after asking not to be, funders receiving inconsistent figures and records kept for years without reason. For each, she estimates likelihood and impact with Mr. Nowak's simple scale. The highest risks involve client data on paper and phones. She uses this list to explain to trustees why governance needs time and attention. The trustees agree to give Grace two days a month for governance work and to review progress quarterly.

Worked example

Grace links governance to trust, better decisions and legal duties, lists risks of doing nothing and identifies client data on paper and phones as the highest risks for trustees.

Synthetic case. Risks are synthetic; DAMA-DMBOK2 and the GDPR are real.

Errors and limits

Presenting governance only as compliance misses its value for decisions and trust.

Exercises

EX006 — Breach effect. How could a referral breach affect clients? Rubric: 3 = families might stop seeking help;; 2 = partly correct;; 1 = vague;; 0 = none.
EX007 — Marketing rule. What do fundraising emails need? Rubric: 3 = consent;; 2 = partly correct;; 1 = other;; 0 = none.
EX008 — Decision example. Name one decision good data support. Rubric: 3 = where to open a distribution point;; 2 = one;; 1 = vague;; 0 = none.
EX009 — Highest risks. Which risks ranked highest? Rubric: 3 = client data on paper and phones;; 2 = partly correct;; 1 = partial;; 0 = none.
EX010 — Trustee case. What did Grace use to explain the need for governance? Rubric: 3 = her ranked risk list;; 2 = partly correct;; 1 = vague;; 0 = none.

Continue studying — lesson 02 (chapter 02 of 12)

← Chapter 01 · Course chapter index · Chapter 03 →

Continue to the next authored lesson.