Which of the following is not typically included in a surveillance data governance framework?

• A. Marketing partnerships with data vendors.
• B. Data ownership
• C. Privacy protections
• D. Data sharing agreements

Answer: (D)

A surveillance data governance framework centers on how data is managed and protected within the program: who owns the data, how privacy is safeguarded, and the formal rules for sharing data. Data ownership assigns responsibility and accountability for data quality and use. Privacy protections cover de-identification, access controls, and compliance with privacy laws to protect individuals’ information. Data sharing agreements specify who may access the data, for what purposes, and the terms for retention and security. Marketing partnerships with data vendors, while relevant to data sourcing and procurement, are not a core element of the governance framework for surveillance data; they fall more under vendor management than the governance of data use and protection itself.