The building produces data. Who keeps the leverage?

A data point is only useful when its meaning, quality, permitted use, owner, access path, decision role, retention, and exit are clear. Put those rules in the operating model and the contract.

Begin with the decision, not the lake.

For each promised use, name the operational decision, required source points, context and identifiers, acceptable quality, response owner, retention need, permissions, and exit format. Data with no decision or owner is an unmanaged cost and exposure.

Data path in view

Govern the full data lifecycle.

Collection, decision rights, and a usable export path should be designed before the building starts producing data.

Building sensor and gateway connected by orderly cables on an operations bench01
Collect — document what enters the data flow and why.
Hands mapping data ownership with blank cards and transparent connecting layers02
Control — make owners, purposes, and access boundaries explicit.
Secure drawer with unbranded data drives beneath a blank retention checklist03
Retain and exit — prove that data can be governed and exported.

Published 8 September 2026 · reviewed 9 September 2026. Editorial illustrations generated for Hamed Helped; they do not depict a named site, vendor, or client.

Decision criteria

Six rights turn data access into operational control.

01Purpose

Decision right

The organization names the decision the data supports, the user, response, threshold, and accountable owner.

02Meaning

Context right

Points retain asset, location, unit, timestamp, status, units, lineage, and semantic relationships.

03Quality

Challenge right

Users can see completeness, freshness, calibration, transformations, exceptions, and disputed values.

04Access

Use right

Authorized roles can retrieve required raw and normalized data through workable interfaces and formats.

05Control

Governance right

Collection, sharing, model use, retention, deletion, and secondary use have named approval and review.

06Exit

Portability right

The owner can export data, context, configuration, and history in documented formats on a tested timeline.

Questions to ask

Follow one point from sensor to decision.

  1. Where did it come from?

    Identify the physical source, controller, gateway, transformations, quality checks, timestamps, and current status.

  2. What does it mean?

    Preserve units, asset relationship, location, ontology or tagging, calculation method, and business context.

  3. Who may use it?

    Separate access for operations, tenants, vendors, analysts, models, service providers, and downstream systems.

  4. Which decision changes?

    Name the person, trigger, action, exception path, response time, and record created.

  5. How long is it useful?

    Set retention by operating, legal, privacy, maintenance, analytical, and dispute needs—not unlimited default.

  6. What leaves with the vendor?

    Test export of raw data, normalized data, tags, relationships, rules, configurations, logs, and history.

Evidence table

A data clause needs an operating test.

Claim or decisionEvidenceOwnerWhen checked
Data purposeDecision-to-data map with named action, owner, threshold, and outcomeBusiness process ownerBefore collection
Point meaningData dictionary, identifiers, units, semantic model, lineage, quality statusData steward + system ownerIntegration and change
Permitted useRole matrix, contract terms, privacy basis where applicable, sharing and model-use rulesData owner + legal/privacyBefore access and at review
Decision reliabilityFreshness, completeness, exception, calibration, and disputed-data processOperations + data stewardDuring operation
Exit portabilitySample export, schema, context, configuration, transfer timing, deletion confirmationProperty owner + procurementBefore contract and before exit

Failure modes

Four ways a building loses data leverage.

F-01

Access without meaning

A CSV exists, but identifiers, units, relationships, calculations, and status cannot be reconstructed.

F-02

Dashboard without extraction

The owner can view a vendor interface but cannot reuse or transfer the underlying operational record.

F-03

More data without a decision

Collection grows while no workflow, threshold, response, or accountable person changes.

F-04

Ownership without an exit test

Contract language promises control, but the team has never received a complete usable export.

Connect the decision

Put data rights inside vendor due diligence before signature.

Open due diligence

Evidence trail

Sources behind this guide

  1. 01
    BOMA BEST Field GuideR1.1 Data Access and Ownership (external link)

    Owner/operator considerations for direct data access and common-format export.

  2. 02
    IEA EBC Annex 81A Guide on Data Platforms for Data-Driven Smart Buildings (external link)

    Research guidance on data platforms, semantic models, lineage, and governance capabilities.

  3. 03
    Telecommunications Industry AssociationWhite Paper: Building Operating Systems (external link)

    Industry guidance connecting data management with smart-building architecture and lifecycle.