Data Lineage
What is Data Lineage?
The tracking and documentation of the origin, transformations, and movement of data throughout its lifecycle. Data lineage is essential for AI governance, regulatory compliance, and troubleshooting data quality issues.
Terms that appear alongside data lineage
Each of these is named in at least one of the same controls as data lineage. The number is how many controls name both.
- audit 5 shared controls
- data quality 5 shared controls
- audit trail 4 shared controls
- consent 3 shared controls
- gdpr 3 shared controls
- compliance 3 shared controls
- encryption 2 shared controls
- encryption at rest 2 shared controls
Frameworks that govern data lineage
What the standards actually require on data lineage
Requirements naming data lineage across 6 standards, quoted from the control text.
Approved policy, standards and procedures for managing lineage changes apply consistently on-premises and in the cloud and set the balance of responsibility between the organization and its providers;
edm-council-cdmc-cloud-data-management-capability-framework::6.2.2 · 6.2.2 Data lineage changes are tracked and managed →Agencies should keep data lineage records at dataset metadata level (not every change) showing how data is used, how it flows between users and systems, and key changes, to detect unauthorised access, use or modification and support incident response.
singapore-government-instruction-manual-on-ictss-management-im8::DSP-29 · Maintain data lineage to support incident management →MAF paragraphs 3.55 to 3.59: test user interfaces for usability before deployment and tell users when their responses train the system; communicate in easy-to-understand language, measuring readability and using visual aids for higher-impact decisions;
singapore-ai-governance-framework::MAF-3.55 · Test interfaces, communicate plainly, set acceptable use policies and get information from AI vendors →GRI Standards implementation roadmap. ORGANIZATIONAL ROLES: (a) CHIEF SUSTAINABILITY OFFICER (CSO) / VP SUSTAINABILITY - strategic ownership + Board engagement; (b) SUSTAINABILITY MANAGER / GRI REPORTING MANAGER - operational reporting lead;
GRI-Implementation-Roadmap-Roles-Reporting-Process · GRI Implementation Roadmap, Organizational Roles, Reporting Process and Tooling →GS1 DATA SECURITY + INTEGRITY in supply chain data exchange. KEY PRINCIPLES: (1) DATA INTEGRITY - master data + EPCIS events + GDSN exchanges must be ACCURATE + COMPLETE + TIMELY + reflect true state of supply chain;
GS1-DataSecurity-Integrity-AccessControl · GS1 Data Security and Integrity in Exchange, Access Control and Tamper Evidence →HL7 FHIR Audit + Provenance + Digital Signatures. AUDITEVENT LOGGING (FHIR-SEC-07 + FHIR-SEC-4.1) - FHIR AuditEvent Resource for structured audit logging + IETF RFC 3881 + IHE ATNA + DICOM Audit + comprehensive audit trail of: (a) authentication events;
HL7-FHIR-Audit-Provenance-DigitalSignatures-Integrity · HL7 FHIR Audit + Provenance + Digital Signatures + AuditEvent Resource + Audit Log Integrity + Retention →Questions people ask about data lineage
What is Data Lineage?
Why is Data Lineage important for compliance?
Which compliance frameworks address Data Lineage?
Where can I learn more about Data Lineage?
See how Data Lineage applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.