Andmekäitlus

Andmekäitlus is the management of data throughout its lifecycle within an organization. It encompasses activities related to data collection, storage, organization, processing, sharing, archiving, and eventual disposal, with the goal of supporting operations, decision making, and strategic planning. Andmekäitlus covers both personal and non-personal data and aims to ensure data is usable, accurate, and securely handled.

The scope of andmekäitlus includes data governance, data quality, metadata management, data architecture, and data integration. It involves defining roles and responsibilities, establishing policies and procedures, and implementing controls that enable authorized access while protecting data from misuse. Data management also addresses data security, privacy compliance, and the management of data products and services across the organization.

Data lifecycle management is central to andmekäitlus. Data are created or acquired, stored in appropriate repositories, transformed and analyzed, and reused or shared according to purposes and consents. Retention schedules, archival practices, and secure deletion are part of the process. Core principles often include purpose limitation, data minimization, accuracy, timeliness, and accessibility for authorized users, with emphasis on protecting personal data.

Legal and ethical context is important for andmekäitlus. In the European Union, GDPR regulates personal data processing, and national laws support data protection and public-sector interoperability. Roles such as data controller and data processor define responsibilities for security, transparency, and data subject rights.

Applications of effective andmekäitlus include improved reporting, analytics, automation, and service delivery in business, government, healthcare, and research. Standards and governance frameworks, including information security and data quality practices, support reliable data use and risk management.