#  Data Stewards Best Practices 

 



   ![above top desk of person working on laptop](/sites/g/files/omnuum12036/files/styles/hwp_1_1__360x360_scale/public/2026-05/datastewardrole.jpeg?itok=MVq8mihh) 

 

## Data Stewards

This guide outlines best practices essential for effective data stewardship.

From implementing data governance, ensuring data quality to managing access controls and responding to subject's rights requests, your actions help protect the university's valuable information resources.

Researchers should visit the OVPR’s [Research Data Management site](https://research.harvard.edu/research-policies-compliance/research-data-management/) for additional policy considerations.



 

## Understand the regulatory and contractual obligations

Regulatory compliance requirements for personal data may vary. Business use cases can be unique based on the subject location(s), the collection method, and the type of personal data being collected.

- [Data Privacy Regulations](https://privsec.harvard.edu/policies-and-standards#dataprivacyregs)
- [University Risk Classifications](/classify-risk "Classify Risk")

## Ensure University-Wide Privacy Principles are considered throughout the data lifecycle

From collection to destruction, each data set containing personal information should be handled according to the Privacy Principles\*. In some cases, the actions will be required by law; while others may involve general best practices. Understanding of the Privacy Principles and then applying them to personal data is an important responsibility of a Data Steward.

- [Privacy Principles](https://privsec.harvard.edu/privacy-principles)

\*Security Controls are the responsibility of the System or Service Custodian.



 

##  Related Resources 

Use these resources to take the next step, find University guidance, or explore trusted external references.

 

 



 ### University Policies

Official university guidance, approved tools, and support resources.

- [Research Data Management](https://research.harvard.edu/research-policies-compliance/research-data-management/)
- [University Risk Classification](/classify-risk)
- [Report a Security or Privacy Incident](https://harvard.service-now.com/ithelp?id=submit_ticket&sys_id=3f1dd0320a0a0b99000a53f7604a2ef9)



 

 ### Industry Resources

Trusted external cybersecurity and privacy guidance.

- [Privacy Guides](https://privacyguides.org)
- [International Association of Privacy Professional (IAPP)](https://iapp.org/)
- [NIST Privacy Framework](https://www.nist.gov/privacy-framework)



 

 ### Related Topics

Explore related awareness and education offerings.

- [Education and Training](https://privsec.harvard.edu/awareness-and-education#education)
- [Best Practices Resource Hub](https://privsec.harvard.edu/best-practices)
- [Preserve Privacy](/preserve-privacy "Preserve Privacy")