Privacy and security managers should participate actively in the development of corporate information governance policies, two data management organizations declared last week.

Data privacy and security have been listed as necessary assets in the Information Governance Reference Model (IGRM) since its 2009 development by the Minnesota-based Electronic Discovery Reference Model organization. But previous versions of the model (which includes business and technology processes) did not prescribe that managers who are dedicated to privacy and security functions should be on the teams shaping these policies.