Data Ownership
Data Owner
Senior Executive that has to maintain the CIA of the information asset
Responsible for labelling the asset and ensuring its protected with proper controls
Data Controller
Responsible for deciding the purpose and methods of data storage, collection and usage and for guaranteeing the legality of the process
Holds accountability of any breaches and privacy mishap
Data Processor
Hired by data controller for tasks like collecting, storing and analyzing data
Data Steward
Focused on the quality of the data and the associated metadata
Works along with the data owner
Data Custodian
Responsible for handling and managing the systems on which the data assets are stored
System Administrators act as Data Custodians
Privacy Officer
Responsible for ensuring the proper handling of private data - PII, SPI and PHI
Ensure that organization is complies with legal and regulatory frameworks
Data Sovereignty
Refers to the concept that digital information is subject to the laws of the country in which it is located