✅Compliance

NEW

Also known as: Regulatory Compliance

Adherence to applicable laws, regulations, standards, and internal policies governing operations and data.

DESCRIPTION

Compliance ensures organizations follow external regulations and internal policies, demonstrating conformity through controls and evidence. It spans privacy, security, financial reporting, and industry-specific mandates. Effective compliance programs define responsibilities, document processes, monitor controls, and conduct audits. In data management, compliance influences retention, access, encryption, and breach response. Noncompliance risks fines, legal action, and reputational harm.

ALTERNATIVE DEFINITIONS

Wikipedia

In general, compliance means conforming to a rule, such as a specification, policy, standard or law.

Broad, general-purpose definition of the term.

Source

IBM

Regulatory compliance is an organization’s adherence to laws, regulations, guidelines and specifications relevant to its business.

Focuses specifically on regulatory obligations and organizational adherence.

Source

RELATED TERMS

Governance Risk Management Audit Internal Controls Data Privacy Security GDPR ISO-IEC 27001 Policy Sarbanes–Oxley Act

COMPETING TERMS

Noncompliance

KNOWLEDGE AREAS

Data Governance Data Privacy & Compliance Data Security

TARGET AUDIENCE

Data Governance Manager Chief Data Officer Chief Information Officer Chief Technology Officer Data Steward Enterprise Architect

EXTERNAL SOURCES

• Wikipedia - Compliance (business)
• ISO - ISO 37301 compliance management systems
• NIST - Privacy Framework for compliance alignment
• European Commission - EU data protection rules overview
• Google Cloud - Cloud compliance programs

TOP QUESTIONS

Why is Compliance essential in data management?

Compliance reduces legal and reputational risk and builds trust. It ensures data is handled according to laws and policies. Strong compliance enables sustainable data use.

Category: Relevancy

What is the difference between Compliance and Governance?

Governance defines decision rights and policies; compliance ensures adherence. Governance is proactive; compliance verifies execution via controls and audits.

Category: Distinction

How is Compliance demonstrated?

Through documented controls, audit trails, monitoring, and certifications. Evidence-based assessments and third-party audits show adherence.

Category: Management

What are common Compliance pitfalls?

Treating compliance as a checkbox exercise and not updating policies. Poor training and inadequate monitoring often cause failures.

Category: Mistakes

How does Compliance affect data architecture?

It drives encryption, access controls, retention schedules, and data localization. Architectures must embed these controls by design.

Category: Requirements

What are examples of Compliance frameworks?

ISO 27001 for security, SOC 2 for service organizations, and GDPR for privacy. Industry-specific rules include HIPAA and PCI DSS.

Category: Overview

Who owns Compliance in an organization?

Leadership sets tone; governance teams design policies; stewards and engineering implement controls. Auditors provide independent assurance.

Category: Management

What is the risk of noncompliance?

Fines, legal action, loss of certifications, and reputational damage. Operational disruption can result from mandated remediation.

Category: Risks

How does automation support Compliance?

Policy-as-code, continuous monitoring, and automated evidence collection reduce manual errors. They improve audit readiness and scalability.

Category: BestPractice