Appropriate governance structures are an essential element of embedding the WASPI framework within organisations. This case study focuses on solutions identified by City of Cardiff Council. It is intended to provide examples of good practice rather than prescribe measures other organisations should implement. We recognise that organisations are structured differently and there may be other equally effective examples of good practice – we would be interested to hear about any such examples so we can share them. We are grateful to City of Cardiff Council and particularly Dave Parsons, Information Governance Manager, for the information provided to assist with the development of this case study.