Data Ownership

Data owner

Responsible for labeling information assets and ensuring they are protected with appropriate controls

Data controller

Responsible for determining data storage, collection, and usage purposes/methods, as well as ensuring legality of these processes

Data processor

Hired by data controller to assist with data collection/processing

Data steward

Focuses on data quality and metadata, ensuring data is appropriately labeled and classified

Data custodian

Responsible for managing/securing the systems on which data assets are stored

Privacy officer

Oversees privacy-related data (PII, SPI, PHI) to ensure compliance with legal and regulatory frameworks