Data governance: from theory to practice