Data Governance

Data governance is how we ensure that Syracuse University’s academic and institutional data is accurate, secure, accessible, and used appropriately. It encompasses the policies, procedures, roles, and standards that guide how we collect, manage, share, and protect data across the University.

Effective data governance means that when you need data to make decisions, answer questions, or fulfill your responsibilities, you can:

• Find the right data quickly and easily
• Trust the data because quality standards are maintained
• Understand the data through clear definitions and documentation
• Access the data through appropriate and transparent processes
• Use the data in compliance with University policies and legal requirements

University data is a critical institutional asset that supports:

• Strategic decision-making by leadership and administrators
• Academic planning and program development
• Student success initiatives through retention and graduation analysis
• Regulatory compliance with federal and state reporting requirements
• Accountability and transparency to internal and external stakeholders
• Institutional effectiveness and continuous improvement

Without clear governance, data can become fragmented across offices, definitions may be inconsistent, and stakeholders may struggle to access the information they need.

Syracuse University’s approach to data governance is guided by several core principles:

Our Principles

Accuracy and Quality: Data must be accurate, complete, and maintained to high quality standards to support reliable decision-making.

Accessibility: Data should be accessible to those with a legitimate need, while respecting privacy requirements and security protocols.

Stewardship: Offices that create or maintain data have responsibility for ensuring its quality, security, and appropriate use.

Transparency: Data definitions, policies, and access procedures should be clearly documented and communicated.

Compliance: All data management practices must comply with federal regulations (such as FERPA), state laws, and University policies.

Collaboration: Offices work together to share data efficiently while maintaining appropriate oversight and controls.

Academic Affairs oversees a wide range of institutional data related to students, faculty, academic programs, and institutional effectiveness. Data governance responsibilities are distributed across several offices:

Office of Institutional Data and Reporting (IDR)

IDR serves as the University’s official source for institutional data and manages:

• Federal and state compliance reporting (IPEDS, NYSED, etc.)
• Official census data and enrollment statistics
• Ad hoc data requests requiring official institutional data
• Data quality standards and data dictionary maintenance

Visit: institutionaldata.syr.edu

Office of Institutional Effectiveness (OIE)

OIE supports the University’s continuous improvement through research, analytics, coordination, and consultation in the following areas:

• Student retention and graduation
• Student success and performance
• Learning and success outcomes assessment
• Course feedback
• Accreditation
• Academic strategic planning

Visit: effectiveness.syr.edu

Office of the Registrar

The Registrar maintains official student academic records:

• Student enrollment and registration data
• Academic transcripts and grades
• Degree conferral and graduation records
• Course schedules and section information

Visit: registrar.syr.edu

Other Data Stewards

Additional offices maintain data in their functional areas and collaborate with IDR, OIE, and the Registrar on data governance, including but not limited to:

• Human Resources
• Financial Aid
• Admissions
• Faculty Affairs

Syracuse University classifies data based on sensitivity and the level of protection required:

Confidential Data

Data that requires the highest level of protection due to legal requirements or potential harm from unauthorized disclosure. Examples include Social Security numbers, financial account information, protected health information, and other data protected by federal or state law.

Handling Requirements: Strict access controls, encryption, secure transmission, limited retention, secure disposal.

Enterprise Data

Data necessary for University operations that is not publicly accessible but does not require the same stringent protection as Confidential Data. Examples include internal reports, operational metrics, student enrollment data (in aggregate), and planning documents.

Handling Requirements: Access limited to those with legitimate business need, appropriate security measures, controlled sharing.

Public Data

Data that can be shared openly without restriction. Examples include published University statistics, public website content, course catalogs, and marketing materials.

Handling Requirements: Standard information security practices, accuracy verification before publication.