5.1 Data roles & Responsibilities

Question 1

Data responsibilities

Answer 1

• High-level data relationships– Organizational responsibilities, not always technical
• Data owner– Accountable for specific data, often a senior officer– VP of Sales owns the customer relationship data– Treasurer owns the financial information

Question 2

Data roles

Answer 2

• Data controller– Manages the purposes and means by which personal
  data is processed
• Data processor– Processes data on behalf of the data controller– Often a third-party or different group
• Payroll controller and processor– Payroll department (data controller) defines payroll
  amounts and timeframes– Payroll company (data processor) processes payroll
  and stores employee information
• Data custodian/steward– Responsible for data accuracy, privacy, and security
• Works directly with the data– Associates sensitivity labels to the data– Ensures compliance with any applicable laws
  and standards– Manages the access rights to the data– Implements security controls