Skip to content

Data Integrity

What is Data Integrity?

The assurance that data is accurate, complete, consistent, and unaltered throughout its lifecycle, whether at rest, in transit, or in processing.

Information Security

Terms that appear alongside data integrity

Each of these is named in at least one of the same controls as data integrity. The number is how many controls name both.

Frameworks that govern data integrity

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on data integrity

Requirements naming data integrity across 6 standards, quoted from the control text.

ITU-T X.805 - Security Architecture for End-to-End Communications8 controls

Security Dimension 6 Data Integrity per X.805 Clause 6.6: Data Integrity ensures the correctness or accuracy of data. The data is protected against unauthorized modification + deletion + creation + replication and provides an indication of these unauthorized a...

X805-Dim6-Data-Integrity-Correctness-Accuracy-Unauthorized-Modification-Deletion-Detection · ITU-T X.805 Security Dimension 6 - Data Integrity + Correctness + Accuracy + Unauthorized Modification Prevention + Deletion Detection + Hashing + HMAC + Digital Signatures + Merkle Trees + Blockchain Integrity + File Integrity Monitoring (FIM) →
GAMP 5 - Good Automated Manufacturing Practice7 controls

GAMP 5 DATA INTEGRITY + 21 CFR PART 11 + EU ANNEX 11 alignment. ALCOA+ PRINCIPLES (FDA + EMA + MHRA Data Integrity Guidance): ATTRIBUTABLE + LEGIBLE + CONTEMPORANEOUS + ORIGINAL + ACCURATE + COMPLETE + CONSISTENT + ENDURING + AVAILABLE.

GAMP5-DataIntegrity-Part11-Annex11 · Data Integrity (ALCOA+), 21 CFR Part 11 + EU Annex 11 + Electronic Records →
ICH E6(R3) - Good Clinical Practice3 controls

ICH E6(R3) Annex 1 (Computer Systems Used in Clinical Trials) is the new section consolidating data integrity + electronic systems + computer system validation (CSV) - replacing scattered E6(R2) provisions.

ICH-E6-Annex1-ElectronicSystems-CSV-eSig-Audit-ALCOA-DataIntegrity · ICH E6(R3) Annex 1 - Computer Systems + Computer System Validation (CSV) + Electronic Signature + Audit Trail + ALCOA+ Data Integrity →
Malaysia PDPA 20102 controls

Implement the seven foundational Personal Data Protection Principles mandatory for all data users. Principle 1 General Principle (lawful processing with consent or specified statutory ground + relevant + not excessive).

MY-PDPA-Seven-Personal-Data-Protection-Principles-General-Notice-Choice-Disclosure-Security-Retention-Data-Integrity-Access · Malaysia PDPA Seven Principles + General + Notice and Choice + Disclosure + Security + Retention + Data Integrity + Access →
NIST SP 800-53 Rev 52 controls

Data Integrity Board. Establish a Data Integrity Board to: Review proposals to conduct or participate in a matching program; and Conduct an annual review of all matching programs in which the agency has participated

NIST800-PM-24 · Data Integrity Board. Establish a Data Integrity Board to: Review proposals to conduct or participate in a matching program; and Conduct an annual review of all matching programs in which the agency has participated →
NIST SP 800-53 Rev 5 LOW2 controls

Establish a data integrity board to oversee data sharing and matching agreements.

PM-24 · Data Integrity Board →

Questions people ask about data integrity

What is Data Integrity?
The assurance that data is accurate, complete, consistent, and unaltered throughout its lifecycle, whether at rest, in transit, or in processing.
Why is Data Integrity important for compliance?
Data Integrity is a key concept in Information Security. Understanding data integrity helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Data Integrity?
Data Integrity appears in the requirement text of ITU-T X.805 - Security Architecture for End-to-End Communications, GAMP 5 - Good Automated Manufacturing Practice, ICH E6(R3) - Good Clinical Practice, Malaysia PDPA 2010, NIST SP 800-53 Rev 5. Across these standards we have identified 24 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Data Integrity?
Explore our compliance framework pages to see how data integrity applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Data Integrity applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.