Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Data Governance and Management (DGM) Profile
The DGM Profile seeks to address data governance and management priorities and offer a means to effectively demonstrate complementary use of NIST Frameworks and resources.
Stakeholders have expressed a desire for more support in using NIST Frameworks and resources together. With data governance being the starting point for many organizations seeking the benefits of data while managing privacy risk, we are developing a joint NIST Frameworks DGM Profile.
Development Schedule
| New Year, New Initiatives for the Privacy Framework! | January 25, 2024 |
| DGM Profile Concept Paper 1 | June 18, 2024 |
| Ready, Set, Update! Privacy Framework 1.1 + Data Governance and Management Profile Workshop | Workshop Summary Report | June 25 and 26, 2024 |
DGM Profile Working Sessions
| See schedule below |
| Initial Public Draft | TBD |
DGM Profile Working Sessions Schedule
Building on the valuable stakeholder feedback received during the Ready, Set, Update! Privacy Framework 1.1 + DGM Profile Workshop, we are hosting a series of public working sessions to further shape the joint NIST Frameworks DGM Profile. This next phase in the DGM Profile development offers stakeholders the opportunity to engage in collaborative discussions to shape the content of the DGM Profile Initial Public Draft.
Working sessions are virtual and consist of both guided and open discussions.
Working Session 1: Data Governance and Management Activities
Working Session 1 meetings were held between September 10 - 12, 2024. NIST will use stakeholder feedback from Working Session 1 meetings to inform development of the Data Governance and Management activities in the DGM Profile.
Working Session 2: Data Governance and Management Mappings and Discussions
Working Session 2 will focus on the activities, mappings, and discussion for the DGM Profile activities. The Working Session 2 meeting will be held virtually on May 14, 2026 from 1:00pm - 3:30pm ET. Please sign up for our mailing list to stay up to date on when Working Session 2 materials will be available!*
- Read-Ahead Material | Released prior to meetings
- Registration link and agenda on the Event Page
April 2026 Update: The Profile’s original scope was to support organizations using three specific NIST Frameworks together. NIST is currently updating the AI Risk Management Framework (AI RMF), so the DGM Profile team wishes to proceed with developing an initial Profile that integrates the PF and CSF, provided that this approach would still meet stakeholder needs. A goal of Working Session 2 is to gauge whether such a phased approach will still meet your organization’s needs—provided that a mapping to the AI RMF were added after the new version publishes.
Ways to Engage
- Visit our website. Visit the Privacy Framework website and this page for updates, upcoming events, resources, and other opportunities to weigh in.
- Email updates. To receive updates on the DGM Profile, sign up for email alerts via the Mailing List page.*
- Social Media. If you prefer to get updates via social media, be sure to follow NIST Cyber on LinkedIn and Facebook.
- Contact us. You can always contact us at privacyframework [at] nist.gov (privacyframework[at]nist[dot]gov).
*Mailing List: If you are having trouble joining the mailing list, e-mail PrivacyFramework+subscribe [at] list.nist.gov (PrivacyFramework+subscribe[at]list[dot]nist[dot]gov). If you don't have a Google account, please review and follow these instructions.