Whether the rule is mandatory is a business governance decision and should be approved through the appropriate Data Owner, Data Steward, or governance authority responsible for the Supplier domain.
A developer can implement a database constraint, but technical implementation does not establish business policy. The organization must determine whether every active supplier genuinely requires a tax identifier, whether exceptions exist by jurisdiction or supplier type, and what consequences should follow when the rule is violated.
The approved rule should be documented as metadata and linked to the relevant business term, physical fields, authoritative sources, threshold, and responsible steward.
This illustrates the separation between governance and execution. Governance defines and authorizes the requirement; operational and technical teams implement the validation and monitoring.
DAMA's public framework places Governance across the Data Management knowledge areas and Metadata Management as the mechanism for maintaining definitions, lineage, and usage context.
Reference Topics: DAMA-DMBOK2 Chapter 3 — Governance and Stewardship; Chapter 13 — Data Quality Rules; Metadata Management; Supplier Master Data.
===============