Governing who may use which data for what purpose at Tessera Wellness, a health and fitness platform with 200 million users: the eight-tile authorized use board from purpose and legal basis through authorisation, use agreements, purpose binding, secondary use, misuse review, audit evidence and the governance council; a query-time purpose check that denies a partner's advertising request for sleep data and allows irregular-rhythm alerting on a pseudonymised view; and a self-run misuse review that found and closed partner repurposing, AI training with no basis, an over-broad support role, an unthrottled API and a nightly copy to a laptop.

CY-EXPERT-016Expert Level · Data Governance

Authorized Use of Data — The Authorized Use Board

An expert-level course that goes beyond stewardship and catalogues to govern WHO may use WHICH data for WHAT purpose, enforce that technically, and review the organisation's OWN data flows the way a misuser would look for unauthorised-use gaps. Work the authorized use board across purpose and legal basis inventory, use authorisation, contracts, technical purpose binding, secondary use and AI training, adversary-aware misuse review, monitoring and audit evidence, and governance council and program optimisation.

18 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Build a purpose-and-legal-basis inventory linked to a compatibility-ready purpose taxonomy.
Run a tiered use-authorisation model with named owners, stewards, and time-boxed grants.
Write data use agreements and partner contracts that bind, audit, and remedy purpose breaches.
Enforce purpose technically at access, query, and environment level, with break-glass reserved for emergencies.

Price:৳12,000