The recent transformation of governance through the rise of data-driven paradigms has inaugurated a new phase in which data is no longer a mere instrument of decision-making but a foundational source of legitimacy in public administration. Data-driven governance, relying on algorithmic analysis, evidence-based decision-making, and traceability of administrative processes, claims to enhance efficiency and transparency. Yet, it simultaneously raises fundamental challenges regarding core principles of public law, including legality, attribution of decisions, human dignity, and democratic oversight. Adopting an analytical-critical approach and using documentary-theoretical methods, this study examines three key Iranian policy documents: the “Smart Government Roadmap” (2025), the “Executive Guideline for Data-Driven Governance” (2025), and the “Performance Evaluation By-law” (2024). The findings reveal that despite the development of extensive technological infrastructures, there remains a lack of an independent public law framework to regulate algorithms, ensure legal attribution, and provide remedies for automated decisions. Drawing on comparative insights and domestic evidence, the article argues that the legitimacy of data-driven governance in Iran can only be guaranteed if human dignity and legal accountability are embedded at the core of public law architecture. Accordingly, it proposes the establishment of a National Data Regulator, mechanisms of algorithmic accountability, and transparent performance evaluation standards.