The DR2I Charter

Responsible Data Governance for the Age of AI: Evolving Data Regulation and Governance to Empower Responsible and Sustainable Data Use

DR2I is established as a global, independent initiative dedicated to advancing a required evolution in data regulation, to shape the conditions for data governance and stewardship that promote sustainable innovation, competitiveness, and societal benefit. For too long, global data policy has been shaped by a defensive, absolutist and outdated logic, often relying on restricting data use as the primary means of protection. While historically justified given the technological context it emerged in, this approach no longer effectively serves citizens, companies, researchers, innovators, and governments in an increasingly data-driven and AI-enabled world. Today, the challenge is not whether data should be used, but how data can be used responsibly, safely, for the benefit of individuals and society.

Data regulation and governance stand at a pivotal point. As data and AI technologies, models and systems increasingly shape economic performance, public administration, research, and democratic processes, regulatory models must evolve to safeguard fundamental rights while enabling socially beneficial innovation. Data regulation establishes the legal framework and data governance operationalises the balancing of rights with innovation through risk‑based accountability and evidence‑based outcomes that empower responsible data stewardship. In a context of intensifying global competition in AI and data-driven technologies, coherent and future-ready data governance has become a strategic factor for economic resilience, democratic legitimacy and digital sovereignty.

Data protection remains a cornerstone, but it must evolve from a paradigm of avoidance and restriction to one of proactive data stewardship as empowerment. Data stewardship refers to structured responsibilities and operating practices that combine accountability, risk assessment, transparency mechanisms, and demonstrable societal value. It implies proactive governance and operating structures in which responsibility is embedded in design, oversight, and institutional accountability – not merely imposed by ex post sanctions or formal requirements.

DR2I brings together leading experts from the Americas, Asia‑Pacific, and Europe, representing academia, regulatory practice, industry, and civil society, to develop future-ready, coherent, sustainable, and innovation-sensitive approaches to data law and governance, supported by empirical evidence and operational experience. The initiative ensures legitimacy through academic anchoring, geographic balance, and diversified institutional support, grounded in perspectives from those who design, implement, enforce, and operate data governance and stewardship in practice.

DR2I operates as an independent initiative, a convening platform, and a knowledge hub, committed to academic excellence, regulatory credibility, and practical relevance. The core aim is to inform and advance the shift of global data policy from predominantly avoidance- and restriction‑based approaches to responsible enablement, preserving and advancing privacy, innovation, research, economy, competitiveness, and trust as mutually reinforcing goals, by supporting regulatory evolution that can be translated into effective governance and operationalised through responsible stewardship in practice. This shift seeks to achieve effective and sustainable data protection standards by aligning regulatory efforts with proportionality, balancing of interests, technological realities, and measurable societal outcomes.

DR2I advances its mission through three core activities to support the evolution of data regulation and governance and enable responsible data use in the age of AI:

• Global dialogue and bridge between academia, industry, regulators and policymakers – convening cross‑jurisdictional and cross‑sectoral roundtables, workshops, and expert forums to identify and articulate challenges, promote an evolution of data regulation and policy, and develop common approaches and principles that guide the translation of regulation into governance and stewardship in practice.
• Thought leadership on data regulation and innovation – producing white papers, policy blueprints, regulatory guidelines, and comparative research that outlines how to align data regulation and the protection of fundamental rights with innovation, economic and societal interests, in the context of legislative design and policymaking, and institutional design, practice and culture that empower governance and stewardship for responsible and sustainable data use and AI.
• Promoting regulatory evolution and coherence – advancing consistent, predictable, and innovation‑sensitive interpretation and enforcement of data law across jurisdictions, supporting legal certainty for responsible governance, stewardship, and use, in the context of concrete critical regulatory decisions on innovative technology.

DR2I rejects

• Narratives that frame data protection as either obsolete or absolute, failing to acknowledge other rights and legitimate interests
• Default restriction and data avoidance as primary data governance logic
• Formalistic compliance (e.g., box-ticking exercises) detached from real-world risks and outcomes
• Fragmented, disproportionate and innovation-blind interpretation and enforcement of data law
• Under-complex compliance models and cultures focused on formalities, prioritizing formal documentation over substantive risk management and real-world protection outcomes

DR2I affirms

• Risk-based, output-oriented, and proportionate regulatory frameworks translated into governance and operational stewardship rooted in accountability, transparency, and responsibility over paperwork
• Protection of fundamental rights and innovation as mutually reinforcing goals to empower individuals, advance innovation, and serve the public interest
• Effective data protection arising from empirical evidence, accountability, and transparency
• Proportionality, balancing of interests, and risk differentiation are prerequisites for effective data protection and sustainable innovation

DR2I – core principles

• Data stewardship over restriction: focus on responsible data governance and use, not an avoidance-first interpretation and implementation of data regulation
• Human-centered governance: build frameworks that respect and balance individual rights while empowering individual freedom, research, innovation, and public interest data uses
• Global interoperability and principles: promote common principles for trusted and lawful cross-border data flows
• Evidence-based policymaking: ground regulation in empirical assessments of technological, economic and societal impact and realities
• Enabling responsible data processing: personal data, when governed proportionately and transparently, can expand individual rights, autonomy, scientific progress, and societal welfare

DR2I – key facts

• Global, expert‑driven, neutral, and independent initiative
• Cross‑sector: academia, regulators, industry, civil society
• Focus on risk‑based, output-oriented, proportionate, and forward-looking data regulation, governance, and stewardship
• Commitment to regulatory evolution, interpretative coherence, and legal certainty across jurisdictions

FAQs

What is DR2I’s approach to fundamental rights and regulatory evolution in the age of AI?

DR2I advances a risk‑based, proportionate evolution of data regulation and governance to safeguard fundamental rights while enabling and empowering socially beneficial innovation. DR2I supports the translation of regulatory requirements, rules, and principles into effective governance and responsible stewardship in practice. Regulation should deliver more effective - and therefore better - fundamental rights protection in practice, recognising data protection as important fundamental right in data-related contexts, balancing where such rights and related legitimate interests - including innovation - intersect.

DR2I views regulation, governance, stewardship, and use as a single practical chain from legal norms to real-world outcomes:

• Regulation establishes the binding legal framework of rights, duties, safeguards, and enforcement expectations.
• Data governance is the operational system that translates those requirements and principles into proportionate decision-making, accountability, controls, and oversight - using risk-based and evidence-driven approaches where fundamental rights and related legitimate interests (including innovation, research, and public-interest uses) intersect.
• Data stewardship assigns and executes appropriate responsibility for data across its lifecycle (e.g., purpose discipline, access and sharing conditions, quality, security, retention, transparency, and auditability), ensuring governance is effectively embedded in design, processes, and institutional accountability - not merely documented.
• Use is the resulting data processing in products, services, research, and public administration where benefits and harms materialize - making outcomes measurable and continuously improvable.

DR2I frames regulatory evolution as moving away from avoidance-first approaches (default restriction without effective accountability) toward responsible, proportionate, outcome-oriented use - judged by whether it demonstrably protects fundamental rights in practice.

How does DR2I strengthen effective data protection (rather than box‑ticking compliance)?

DR2I builds on the normative foundations of data protection law, advocating for proportionate, balanced interpretation and coherent enforcement over formalistic compliance, and for responsible enablement through effective governance and responsible data stewardship and use.

How does DR2I incorporate industry implementation experience while ensuring independence?

DR2I actively engages industry stakeholders as part of its cross‑sector dialogue to reflect operational experience from those who design, implement, enforce, and operate data governance and stewardship in practice. DR2I is not controlled, directed, or funded by any single corporate actor or sector, and remains committed to balanced, evidence‑based analysis integrating perspectives from academia, regulatory practice, civil society, and industry. Trades, corporations, or institutions may fund individual DR2I events or a series of events to facilitate convening and participation. Such event funding is transparent and does not confer any editorial control, governance influence, or decision rights over DR2I’s agenda, speaker selection, research outputs, or recommendations.

How is DR2I’s independence ensured?

DR2I safeguards its independence through diversified institutional support, academic anchoring, geographic balance, and transparent structures. Research outputs and policy recommendations are developed in accordance with principles of academic integrity, methodological rigor, and the disclosure of potential conflicts of interest. This institutional design ensures that DR2I remains an independent initiative and a credible convening platform.

Why is global interoperability central to DR2I?

Fragmented regulatory approaches increase compliance burdens, legal uncertainty, and barriers to cross‑border research and innovation. DR2I promotes dialogue and comparative analysis to foster knowledge transfers, greater interpretative coherence and interoperability across jurisdictions, while respecting constitutional and cultural diversity, and supporting legal certainty for responsible governance, stewardship, and use.

Who should engage with DR2I?

DR2I is open to scholars, policymakers, regulators, industry leaders, and civil society actors committed to responsible, sustainable, resilient, and innovation‑compatible data regulation, governance and stewardship, and to responsible data use in the age of AI.

What happens next?

DR2I will finalize its charter and principles, expand its international network, and publish white papers, model interpretative guidance, policy blueprints and recommendations, and comparative mappings on data regulation and innovation in 2026 and 2027.

Who can join the initiative?

DR2I invites partners and individuals to contribute to shaping the next phase of global data regulation, governance, and stewardship: Join the initiative. Contribute to building a globally coherent, innovation‑compatible, and rights‑respecting framework for responsible data regulation, governance, data stewardship and use in the age of AI.