{"id":118423,"date":"2025-04-01T12:09:06","date_gmt":"2025-04-01T10:09:06","guid":{"rendered":"https:\/\/ceadigilaw.org\/gobernanza-de-datos-vs-gobernanza-de-ia-cuando-gestionar-bien-los-datos-no-es-suficiente-2\/"},"modified":"2026-07-17T16:58:18","modified_gmt":"2026-07-17T14:58:18","slug":"gobernanza-de-datos-vs-gobernanza-de-ia-cuando-gestionar-bien-los-datos-no-es-suficiente-2","status":"publish","type":"post","link":"https:\/\/ceadigilaw.org\/en\/womens\/blog\/gobernanza-de-datos-vs-gobernanza-de-ia-cuando-gestionar-bien-los-datos-no-es-suficiente-2\/","title":{"rendered":"Data Governance VS AI Governance: When Managing Data Well Is Not Enough"},"content":{"rendered":"<p id=\"ember50\" class=\"ember-view reader-text-block__paragraph\"><em>By <\/em><a class=\"seVZkUMdlXHExvaoRUqmIRWAjXpYSHRBY \" href=\"https:\/\/www.linkedin.com\/in\/antoniotejedaencinas\/\" target=\"_self\" data-test-app-aware-link=\"\"><em>Antonio Tejeda Encinas<\/em><\/a><em> , president <\/em><a class=\"seVZkUMdlXHExvaoRUqmIRWAjXpYSHRBY \" href=\"\/en\/\" target=\"_self\" data-test-app-aware-link=\"\"><em>Comite Euro Americano Digital Law<\/em><\/a><em> , and <\/em><a class=\"seVZkUMdlXHExvaoRUqmIRWAjXpYSHRBY \" href=\"https:\/\/metachannelcorp.com\/\" target=\"_self\" data-test-app-aware-link=\"\"><em>Meta Channel Corp<\/em><\/a><\/p>\n<p id=\"ember51\" class=\"ember-view reader-text-block__paragraph\">It is no surprise that, in any steering committee or strategic document of 2025, the term <strong>\u201cartificial intelligence governance\u201d<\/strong> already appears. What is indeed worrying is that, despite its omnipresence, it is too often confused with something it is not: a futuristic extension of data governance. This conceptual error \u2014which seems minor\u2014 is preventing many organizations from adequately addressing the real risks of AI.<\/p>\n<p id=\"ember52\" class=\"ember-view reader-text-block__paragraph\">Because managing data is one thing, and governing autonomous systems capable of making decisions with structural impact is quite another. And that requires accepting that AI has brought with it an additional layer of complexity, which cannot be resolved by applying the traditional frameworks of data governance.<\/p>\n<h3 id=\"ember53\" class=\"ember-view reader-text-block__heading-3\">First confusion: \u00abwe already have data policies, that covers AI\u00bb<\/h3>\n<p id=\"ember54\" class=\"ember-view reader-text-block__paragraph\">In too many organizations, especially in the financial and healthcare sectors, the starting assumption is that if data is well governed, then everything AI does will be as well. But the problem is not only what data AI uses, but what it does with it.<\/p>\n<p id=\"ember55\" class=\"ember-view reader-text-block__paragraph\">For example, a bank may have excellent control over its customers&#8217; data, from credit profiles to payment history. But if an AI system automates mortgage approvals and ends up systematically rejecting certain socioeconomic profiles \u2014without anyone knowing why\u2014, we are not facing a data problem, but an algorithmic governance problem. And there, the answer is no longer technological: it is legal, ethical and organizational.<\/p>\n<h3 id=\"ember56\" class=\"ember-view reader-text-block__heading-3\">Second confusion: \u00abthinking it only impacts IT\u00bb<\/h3>\n<p id=\"ember57\" class=\"ember-view reader-text-block__paragraph\">AI governance is not a technical matter confined to an IT department. It directly affects areas such as human resources, marketing, regulatory compliance, general management, and even collegiate bodies.<\/p>\n<p id=\"ember58\" class=\"ember-view reader-text-block__paragraph\">Imagine an HR department that uses AI to perform automated CV screening. Even if the data is encrypted and stored in accordance with the GDPR, if the model systematically excludes women over 50, we are facing a structural bias. Who detects it? Who corrects it? Who is accountable? This is not a question for the IT specialist. It is a question for the entire organization.<\/p>\n<h3 id=\"ember59\" class=\"ember-view reader-text-block__heading-3\">Third confusion: \u00abgoverning AI is supervising the data\u00bb<\/h3>\n<p id=\"ember60\" class=\"ember-view reader-text-block__paragraph\">Data governance frameworks, as we well know, are designed to answer key questions: who owns the data?, how is it stored?, what rules apply to its exchange?, is it reliable and does it comply with regulation?<\/p>\n<p id=\"ember61\" class=\"ember-view reader-text-block__paragraph\">All of this is essential.<\/p>\n<p id=\"ember62\" class=\"ember-view reader-text-block__paragraph\">But AI demands another kind of question:<\/p>\n<p id=\"ember63\" class=\"ember-view reader-text-block__paragraph\"><em> How is the model trained and with what criteria? <\/em> Who validates the results? <em> How is its behavior audited? <\/em> What mechanisms are there to correct an automated failure in real time?<\/p>\n<p id=\"ember64\" class=\"ember-view reader-text-block__paragraph\">When an insurer uses AI to set differentiated premiums without even the CEO knowing how it does so, we are not facing a data governance problem.<\/p>\n<p id=\"ember65\" class=\"ember-view reader-text-block__paragraph\">We are facing a delegation of power without control.<\/p>\n<h3 id=\"ember66\" class=\"ember-view reader-text-block__heading-3\">AI Act: the European turning point<\/h3>\n<p id=\"ember67\" class=\"ember-view reader-text-block__paragraph\">The European Union&#8217;s Artificial Intelligence Regulation (AI Act), in force since August 2024, starts precisely from this distinction. It does not confuse AI governance with data protection, but creates a specific framework of obligations for the design, deployment and supervision of AI systems, especially in high-risk contexts.<\/p>\n<p id=\"ember68\" class=\"ember-view reader-text-block__paragraph\">The EU has understood that AI is not limited to operating with data: it operates on people, rights, decisions and structures. And therefore, it must be subject to principles such as transparency, explainability, accountability and meaningful human intervention.<\/p>\n<p id=\"ember69\" class=\"ember-view reader-text-block__paragraph\">In short: Managing data well is not enough.<\/p>\n<p id=\"ember70\" class=\"ember-view reader-text-block__paragraph\">It is like saying that because a car has good tires, there is no need to regulate the driver.<\/p>\n<p id=\"ember71\" class=\"ember-view reader-text-block__paragraph\">AI does not only process information: it acts.<\/p>\n<p id=\"ember72\" class=\"ember-view reader-text-block__paragraph\">And that is why AI governance cannot be reduced to good data practices. It demands a new framework. A change of mindset.<\/p>\n<p id=\"ember73\" class=\"ember-view reader-text-block__paragraph\">And, above all, it demands institutional leadership to accept that governing AI is governing the invisible power that today makes decisions without a face or a signature.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>By Antonio Tejeda Encinas , president Comite Euro Americano Digital Law , and Meta Channel Corp It is no surprise that, in any steering committee or strategic document of 2025, the term \u201cartificial intelligence governance\u201d already appears. What is indeed worrying is that, despite its omnipresence, it is too often confused with something it is [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":116393,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"wds_primary_category":0,"wds_primary_cea_women":0,"footnotes":""},"categories":[1102,1106],"tags":[],"cea_women":[1111],"class_list":["post-118423","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-artificial-intelligence","category-women-digital-law"],"acf":[],"_links":{"self":[{"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/posts\/118423","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/comments?post=118423"}],"version-history":[{"count":1,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/posts\/118423\/revisions"}],"predecessor-version":[{"id":119223,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/posts\/118423\/revisions\/119223"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/media\/116393"}],"wp:attachment":[{"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/media?parent=118423"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/categories?post=118423"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/tags?post=118423"},{"taxonomy":"cea_women","embeddable":true,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/cea_women?post=118423"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}