This paper investigates data governance empirically by conducting a retrospective study of the ten-year evolution of a national digital service for personal health data in Norway. We show how data governance unfolds over time as data become shared and itinerant across multiple actors. Building on our findings, we introduce the concept of data governance spaces to refer to the authorized relationships among multiple actors, which specify the boundaries of decision-making authority, rights, roles, and responsibilities around data processing. We contribute to the literature on data governance by distinguishing between a) authority multiplication, where data are handed over to other actors to serve diverse purposes triggering horizontal dynamics, and b) actor subordination, where authorities delegate data handling for uniform purposes triggering vertical dynamics. Overall, the paper extends prior research by showing how data governance unfolds beyond intra-, or inter-organizational boundaries and shifts attention to data's pivotal role, and the purposes for which data are collected, shared or used across multiple actors.

本文通过对挪威个人健康数据国家数字服务的十年演变进行回顾性研究，从经验上调查数据治理。我们展示了随着数据在多个参与者之间共享和流动，数据治理如何随着时间的推移而展开。基于我们的发现，我们引入了数据治理空间的概念来指代多个参与者之间的授权关系，它指定了围绕数据处理的决策权、权利、角色和责任的边界。我们通过区分 a) 权限倍增（数据被移交给其他参与者以服务于引发横向动态的不同目的）和 b) 参与者从属关系来为数据治理文献做出贡献，当局出于统一目的委托数据处理，触发垂直动态。总体而言，本文扩展了先前的研究，展示了数据治理如何超越组织内部或组织间的界限，并将注意力转移到数据的关键作用，以及在多个参与者之间收集、共享或使用数据的目的。