New laws about climate and energy use have made data management a top priority for companies. In Europe, large companies must start following new reporting rules called CSRD in 2024, with their first reports due in 2025 (KeyESG, 2024). Companies worldwide are also being pressured to show they care about the environment and operate responsibly, with ESG principles continuing to gain momentum in 2024 (Barnes & Thornburg, 2025).
For people who manage buildings, property owners, and engineers, these new rules create immediate problems they must solve. In the United States, the Securities and Exchange Commission stayed its climate-disclosure rule on 4 April 2024, and in March 2025 signaled it may stop defending the rule while litigation proceeds in the Eighth Circuit. (Reuters, 2024). However, companies still need to show good environmental performance to get loans, lower insurance costs, attract tenants, and protect their reputation.
The challenge is especially hard for people who own many buildings. Some buildings are old with basic equipment, while others are modern with advanced sensors and smart technology.
The requirement is clear: data must be accurate, consistent, and complete from the moment it’s collected until it appears in environmental reports. This has made data management a top-level business priority that directly affects money and following the law.
How Data Flows from Sensors to Reports
Understanding how data moves through systems is essential for good management. The typical process has six steps:
- Sensors & Edge Devices → 2. Building Management Systems → 3. Cloud storage → 4. Data checking processes → 5. Analysis software → 6. Final reports or auditor access
Internet-connected sensors collect important information from buildings, including how many people are inside, temperature, air quality, and energy use (Milesight, 2024). Studies of smart energy-management deployments typically show 15-30 % energy-cost savings; when paired with deep retro-commissioning and on-site renewables, carbon-emission reductions of 20-40 % have been documented (Department of Energy Better Buildings, 2024).
However, the value of this data depends completely on having good controls at each step.
Important data types include energy use (measured in kWh), water use, waste creation, indoor air quality, how many people use the building, and equipment condition. The data goes through many changes as it moves through the system: converting between different units, adjusting for weather, looking up greenhouse gas factors, and adding financial information.
Every handoff point can cause problems: sensors can fail, time zones can get mixed up, data can be duplicated, and version control can get confused. These issues can damage data quality and cause legal compliance problems.
The Four-Part Framework for Data Management
Effective data governance requires a systematic approach that addresses the entire data lifecycle from initial collection to final reporting. The four-pillar framework provides a structured methodology for transforming raw building data into reliable, audit-ready ESG metrics. Each pillar builds upon the previous one: establishing trustworthy data capture, normalizing information across portfolio assets, implementing quality controls and compliance procedures, and delivering stakeholder communications that meet regulatory standards. This comprehensive approach ensures data integrity while enabling scalable operations across diverse building portfolios.
Part 1: Capture – Making Sure Source Data is Trustworthy
Good data management starts with proper equipment care and basic validation. Smart building sensors monitor environmental factors like temperature, humidity, lighting, and occupancy and can be placed throughout buildings (Matterport, 2024). However, installing sensors without proper management creates more problems than solutions.
Important capture controls include setting up regular calibration schedules, implementing basic validation rules for range checks and alerts when sensors stop working, and ensuring accurate timestamps through secure clock synchronization. Technical protocol choices—whether BACnet, Modbus, or MQTT—directly affect how much information you can get and should use standardized tagging systems.
Protocol Comparison for Upgrade Decisions:
| Protocol | Cost | Metadata Support | Cyber-Risk | Best Use Case |
| BACnet/IP | Free standard | Excellent | Medium | Multi-vendor building systems |
| MQTT Sparkplug | Free standard | Good | Low | Cloud-first IoT deployments |
| Modbus TCP | Free standard | Basic | Medium | Legacy equipment integration |
| Proprietary APIs | Vendor-specific | Variable | High | Single-vendor ecosystems |
Data Privacy & Cybersecurity: Sensors that track occupants collect personal data requiring encryption, role-based access controls, and privacy impact assessments to follow data protection laws.
Action items for facility managers: Establish standard naming conventions before installing sensors, maintain clear links between maintenance systems and building management systems, and implement data-type mapping with proper scaling factors. Engineers should prioritize cybersecurity through TLS encryption and firewall separation to protect data integrity.
Part 2: Consolidate – Making Data Consistent Across All Properties
Raw sensor data from different buildings needs sophisticated processing before it can support company-wide environmental reporting. Data governance establishes policies and procedures for how data is collected, stored, secured, and used, including how the system will comply with data security and privacy laws (HiveMQ, 2024).
Architecture decisions between data lakes, warehouses, and event stores significantly impact how time-series building data is managed. Processing tasks include unifying time zones, aligning fiscal versus calendar years, standardizing unit conversions (BTU↔kWh for both US and international readers), and selecting weather stations for baseline adjustments.
Context layers add business intelligence: building information including gross floor area, use type, climate zone, and occupancy schedules. Schema and standard decisions—particularly adoption of Project Haystack, Industry Foundation Classes (IFC), or COBie standards—enable cross-portfolio comparability essential for meaningful environmental metrics.
The role of Data Steward becomes critical: This person oversees mapping rules, approves system changes, and maintains a living data dictionary that ensures consistency across all properties. The result is a single, searchable source of truth that enables scalable analytics and machine learning applications.
Part 3: Control – Policies, Roles, and Quality Gates
Management controls require formal structure and accountability. A comprehensive data governance charter should define scope, principles, and responsibilities using clear matrices that specify roles for facility managers, engineers, property owners, and environmental officers.
Quality measures provide measurable outcomes: completeness percentages, accuracy thresholds, timing agreements, and problem detection rates. Automated alerts and work orders can be triggered the moment performance deviates from predefined standards, enabling proactive quality management (Planon Software, 2023).
Change management workflows ensure sustainable governance through versioned transformations, code review processes for data processing modifications, and documented rollback procedures. Compliance artifacts—including audit trails, security certifications, and signer documentation—provide the foundation for external environmental attestations.
Data Retention & Deletion: Environmental data is now considered “financially material” under most regulatory frameworks, requiring clear retention schedules aligned with legal requirements. Set retention schedules that meet the longest legal requirement applicable to the portfolio (typically three to ten years) and ensure backups cannot be changed.
Part 4: Communicate – Turning Operations into Environmental Metrics
The final part transforms operational data into stakeholder-ready environmental communications. Following the ISSB’s IFRS S1 and IFRS S2 sustainability-disclosure standards issued in June 2023 (effective for periods beginning 1 January 2024), companies are mapping legacy GRI, SASB and SBTi metrics to the new baseline.
Emission factor libraries require ongoing maintenance and methodology logging to ensure accuracy. Data source documentation—including flow diagrams, confidence scores, and footnoted assumptions—satisfies external auditor requirements and builds stakeholder confidence.
Enhanced Pre-Audit Checklist for Environmental Assurance:
| Evidence Type | Required Artifacts | Frequency |
| Data Flow | Complete sensor-to-report diagram | Annual |
| Control Testing | Validation procedure documentation | Quarterly |
| Cybersecurity | SOC 2 Type II report or equivalent | Annual |
| Methodology | Emission factor calculation documentation | Annual |
| Calibration | Sensor maintenance and calibration logs | Monthly |
| Quality Dashboard | Data completeness and accuracy metrics | Real-time |
| External Confirmation | Auditor confirmation letter | Annual |
Delivery channels include investor environmental portals, tenant dashboards, annual sustainability reports, and regulatory filings with appropriate digital tagging. Value-added communications help facility managers justify capital expenditures, enable property owners to defend asset valuations, and allow engineers to demonstrate measurable performance improvements.
Implementation Plan
First 90 Days (Quick Wins): Count existing sensors and data systems, appoint a dedicated data steward, draft standardized naming conventions, and implement automated backup systems with basic monitoring capabilities.
12-Month Target (Integrated System): Deploy cloud-based data storage architecture, connect more than 70% of portfolio metering systems, implement comprehensive quality control processes, and pilot automated environmental reporting on flagship properties. Large owners should consider phasing roll-outs by building type, prioritizing buildings where lease expiry aligns with sensor upgrades for least-cost deployment.
3-Year Vision (Continuous Improvement): Achieve 100% portfolio coverage with AI-driven fault detection feeding capital planning processes, deploy real-time environmental dashboards, and obtain external certification.
Budget considerations: Use existing building management infrastructure, phase investments around lease renewal cycles, and coordinate upgrades with planned equipment retrofits to optimize cost-effectiveness.
Conclusion
Complete data governance has evolved from an operational nice-to-have to a regulatory necessity for multi-site real estate owners facing increasing environmental scrutiny. The evolving landscape of environmental reporting regulation demands sophisticated data management capabilities that many organizations are still developing (Anthesis Group, 2025).
A structured approach across the four parts—Capture, Consolidate, Control, and Communicate—transforms fragmented operational data into board-ready, audit-proof disclosures that support both regulatory compliance and business performance. The investment in proper data governance pays dividends through avoided regulatory penalties, reduced operational expenses, and enhanced asset valuations.
The path forward requires immediate action: Organizations should establish cross-functional data governance task forces this quarter, begin with quick wins that demonstrate value, standardize early to avoid technical debt, and iterate continuously as regulatory requirements evolve. The cost of inaction—regulatory non-compliance, operational inefficiency, and competitive disadvantage—far exceeds the investment in proper data governance infrastructure.
Key Terms
BMS (Building Management System): Centralized system for monitoring and controlling building systems like HVAC, lighting, and security.
COBie (Construction Operations Building Information Exchange): Standard for exchanging building information throughout the asset lifecycle.
CMMS (Computerized Maintenance Management System): Software for managing maintenance operations and asset information.
IFC (Industry Foundation Classes): Open standard for building information modeling data exchange.
ISSB (International Sustainability Standards Board): Body that develops global sustainability disclosure standards.
TCFD (Task Force on Climate-related Financial Disclosures): Framework for climate-related financial risk disclosure.
Sources
- Anthesis Group. “ESG Regulations 2025: Navigating The Evolving Reporting Landscape.” Anthesis Insights, 16 Jan. 2025.
- Barnes & Thornburg. “ESG in 2024 and Outlook for 2025 in the US and EU: A Tale of Two Regions.” Barnes & Thornburg Legal Insights, 20 Feb. 2025.
- U.S. DOE Better Buildings. “Energy Management Systems Case Studies.” (2024)
- HiveMQ. “Importance of Data Governance and Integrity in Industrial IoT Use Cases.” HiveMQ Blog, 16 Oct. 2024.
- KeyESG. “Everything you need to know about EU ESG regulations.” KeyESG, 31 Aug. 2024.
- Matterport. “How Smart Building IoT Enhances Facility Management.” Matterport Blog, 2024.
- Milesight. “Smart Building Sensors: a Comprehensive Guide to Facility Managers.” Milesight IoT, 14 Sep. 2024.
- Planon Software. “IoT Sensors for Corporate Real Estate and Facility Management – Benefits & Use Cases.” Planon, 11 July 2023.
- Reuters. “SEC Climate Disclosure Rule Stayed by Eighth Circuit Court of Appeals.” Reuters, 2024.