Core principle 5: Data at the source

Collaborating requires data sharing. This does not mean, however, that one must transfer their data to the other party. Within the BDI an organization remains the owner of their own data. This principle is also known as data sovereignty: the data stays at the source, under the owner's control.

How does it work?

When a relevant event happens — such as a delivery, measurement, registration or a completed process — no complete dataset is distributed. Instead, only a notification with a reference (metadata) is shared. Only authorized parties (that adhere to the conditions set by the data sharer) can use this reference to request additional information.

As a data owner, one can always:

• see who is requesting access to the data;
• determine what information is shared;
• report this for justification and auditing.

This is in line with the European legislation, such as the Data Act and the GDPR.

What does that mean in practice?

• Complete control over your own data.
• One reliable source (single source of truth)
• Only access for authorized parties
• Complete transparency and traceability
• Ownership remains, even when IT is outsourced