| Current-state assessment | Document governance, quality, privacy, access and lifecycle gaps. | Executives, data, risk, privacy, audit | Findings report and prioritised register |
| Customer data-domain model | Define domains, subdomains, critical elements and authoritative sources. | Data owners, architecture, platforms | Domain map and data-element register |
| Ownership and decision-rights matrix | Clarify accountability for definitions, quality, access, use and risk acceptance. | Business leaders, stewards, technology | RACI, charters and forum terms |
| Policy and standards set | Establish minimum expectations for collection, use, quality, sharing and lifecycle. | Data, privacy, security, operations | Policies, standards and procedures |
| Consent and preference control design | Align capture, evidence, propagation, change and withdrawal. | Marketing, digital, service, privacy | Control model and workflow specifications |
| Data quality framework | Define rules, thresholds, monitoring, ownership and remediation. | Data stewards, engineering, operations | Rule catalogue, dashboards and issue workflow |
| Implementation roadmap | Sequence people, process, technology and control changes. | Programme leaders, finance, procurement | Prioritised backlog, dependencies and milestones |
| KPI and assurance framework | Measure adoption, control execution, exceptions and improvement. | Governance forum, risk, management | KPI dictionary and reporting pack |