A data governance plan, supported by effective technology, is a driving force to help document the basis for lawful processing, and define policies, roles, and responsibilities for the access, management, security, and use of personal data. This paper addresses data governance from concept to implementation.