Data Roles and Responsibilities

Data subjects

are individuals whose personal data is being protected

Data controllers

are the entities who determine the reasons for processing personal information and direct the methods of processing that data

Data stewards

are individuals who carry out the intent of the data controller and are delegated responsibility from that controller

Data custodians

are individuals or teams who do not have controller or stewardship responsibility but are responsible for the secure safekeeping of information

Data processors

are service providers that process personal information on behalf of a data controller