Data Platform / Governance
Data PlatformGovernanceMDMData Quality

Master Data Management (MDM)

Problem

Disparate systems each maintain their own version of core business entities like Customer and Product, so no single authoritative record exists. The resulting duplicates and conflicting attributes inflate costs, corrupt analytics and reporting, and expose the business to compliance and regulatory risk.

Solution

Implement an MDM system to deduplicate, match, merge, and govern core entities, creating a single 'Golden Record' that is synchronized back to operational systems or data warehouses.

Cloud Paradigm

  • Single Source of Truth (Golden Record consolidation)
  • Entity Resolution (deterministic and probabilistic match, merge, survivorship)
  • Data Stewardship & Governance Workflow (human-in-the-loop review)
  • Decoupled Data Integration (batch, change-data-capture, and event ingestion)
  • Data Lineage & Cross-Reference Mapping (local-to-master ID xref)
  • Bidirectional Synchronization (write-back to operational and analytical systems)

Solution Flow

  1. Source systems (CRM, ERP, e-commerce, billing) emit records for core entities—Customer, Product, Supplier—each with local identifiers, formats, and partial attributes.
  2. The MDM ingestion layer collects these records via batch extracts, change-data-capture streams, or API events, and lands them in a staging area without altering the originals.
  3. The standardization engine cleanses and normalizes fields—parsing addresses, validating emails, unifying units and code lists—so downstream matching compares like-for-like.
  4. The match & merge engine applies deterministic keys and probabilistic/fuzzy scoring to cluster records that represent the same real-world entity, then survives the best attribute values into a single candidate.
  5. The Golden Record is persisted with lineage back to every contributing source record and a cross-reference (xref) mapping local IDs to the master ID.
  6. Data stewards review low-confidence matches and merge conflicts in a workflow console, approving, splitting, or overriding automated decisions.
  7. The synchronization layer publishes the trusted master back to operational systems, data warehouses, and analytics platforms via events or reverse-ETL, closing the loop.

When to Use

  • Multiple systems independently own the same entity and no authoritative version exists.
  • Global reporting, regulatory reporting, or KYC/AML requires a single, reconciled view of customers or products.
  • Mergers and acquisitions force consolidation of overlapping customer or product catalogs.
  • Duplicate records inflate marketing spend, corrupt segmentation, or break entitlement checks.

When NOT to Use

  • A single system of record already owns the entity cleanly—governance there is cheaper than an MDM hub.
  • The entity is transactional or high-velocity (orders, sensor readings) rather than a slowly changing reference entity.
  • The organization lacks stewardship capacity; unmanaged match rules degrade into an unmaintained black box.
  • Only lightweight de-duplication is needed, achievable with an in-pipeline dedupe step.

Trade-offs

  • Trusted single view across the enterprise vs. the operational cost of stewardship workflows and match-rule tuning.
  • Reduced downstream reconciliation effort vs. added latency between source change and golden-record propagation.
  • Reusable, governed master data vs. the complexity of integrating write-back into legacy operational systems.
  • Full lineage and auditability vs. significant storage and processing overhead for xref and history.

Real-World Example

A global insurer running separate policy, claims, and broker-portal platforms found the same policyholder represented five different ways, blocking accurate lifetime-value and exposure reporting. They deployed an MDM hub that ingested nightly CDC feeds from each platform, standardized names and addresses against a postal reference, and ran probabilistic matching to build a Golden Customer Record. Stewards resolved a queue of ambiguous matches, and the reconciled master ID was synchronized back to the claims system and the data warehouse, cutting duplicate customers by 38% and enabling a single regulatory exposure report.

Additional Details

  • Match tuning and reprocessing: Every threshold change or new survivorship rule can re-cluster existing records, so version match rulesets and re-run matching against a held-out labeled set to measure precision/recall before promoting. Retain the ability to replay historical records through updated rules.
  • Merge reversibility: Never physically discard source records on merge; store the xref and survivorship provenance so a wrong merge can be split (unmerged) and a missed match re-linked without data loss. Persist per-attribute source and timestamp to defend every surviving value.
  • Write-back consistency: Synchronization is eventually consistent—operational systems may act on stale local values before the master ID propagates. Make write-back idempotent keyed on master ID, and handle rejects (validation, locking) via a dead-letter queue with steward review rather than silent drops.
  • Schema evolution: Source attributes drift; isolate mappings in a versioned transformation layer so a new field or code-list value doesn't break standardization. Maintain backward-compatible published master schemas since many consumers subscribe.
  • Observability: Instrument match rates, auto-merge vs. steward-queue ratio, false-merge/split counts, survivorship source distribution, and source-to-golden propagation lag. Rising steward queue depth signals rule decay.
  • Operational load: Xref and full history tables grow continuously—budget for periodic archival, index maintenance, and batch-window capacity as source volume and match-comparison counts scale non-linearly.

Security Controls

  • Attribute-level access control: Restrict visibility of PII fields (national ID, date of birth) on the golden record to roles with a demonstrated need.
  • Stewardship audit trail: Log every merge, split, and override with steward identity, timestamp, and prior value for regulatory defensibility.
  • Encryption in transit and at rest: Protect source feeds, staging areas, and the master store with TLS and managed key encryption.
  • Data lineage and provenance: Maintain immutable cross-reference links so every golden attribute traces to its contributing source record.
  • Consent and residency enforcement: Tag master records with jurisdiction and consent flags to gate downstream synchronization for GDPR/CCPA compliance.
  • Segregation of duties: Separate rule-authoring, stewardship approval, and synchronization privileges to prevent unilateral master-data changes.

Related Patterns