5.1 Data Roles and Responsibilities

Data Owner

• A high-level individual in the organization responsible for a specific category of data.

• For example, the VP of Sales might own customer data, while the Treasurer owns financial data.

• Oversee the use, protection, and management of that data and are ultimately accountable for its integrity and security.

Data Controller

Determines how data is used and gives instructions on its processing.

• For instance, a payroll department (controller) decides how payroll data should be used and instructs a payroll company (processor) to carry it out.

Data Processor

Follows those instructions by the controller and performs the actual data handling

• Accesses personal and financial information to complete the payroll tasks.

• For instance, a payroll department (controller) decides how payroll data should be used and instructs a payroll company (processor) to carry it out.

Data Custodian / Data Steward

• Ensures the security, accuracy, and privacy of data.

• Help keep the organization compliant with data-related laws and regulations.

• May assign sensitivity labels and control access based on those labels, determining which users can access specific types of data.