The SmartBuilt4EU project has set up four task forces investigating issues related to smart buildings: their objective is to identify the remaining challenges and barriers to smart building deployment, and the associated research and innovation gaps that should be addressed in the near future. Task force 4 investigates the transversal requirements (Business & finance, data, education & upskilling) to support the market uptake of smart buildings, and the strengthening of the related ecosystem.The topic investigated in year 2022 addressed Data governance and cybersecurity. This White paper focuses therefore on the following questions: What are the existing policies, regulations and certification frameworks relevant to the topic of data governance, privacy and security? How are data privacy and cybersecurity accounted for by smart devices manufacturers and installers and how should this be improved to better anticipate future threats and challenges? What are the goals of optimal data governance policy? What are the key trade-offs to protect the end-users while enabling new data-driven services? How to better manage data access and use for the different stakeholders, while securing quality and accuracy of data? In its first part, this paper provides a state of the art regarding the following issues, specific attention being paid to EC-funded projects: Regulation and certification Smart devices and cybersecurity End-users and data privacy Data sharing and data users A brainstorming process enabled to identify some key barriers and drivers regarding the Data governance and cybersecurity. Based on the State of the Art and the barriers and drivers, a number of research and innovation gaps were identified including: R&D, Demo, regulation & legal framework, certification & standardisation and scaling up & industrialisation. The gaps will feed the elaboration of the Strategic Research and Innovation Agenda on smart building, together with some recommendations targeting policy makers.