5.5 privacy and sensitive data concepts in relation to security

Question 1

Data Owner

Answer 1

senior officer responsible for data sets within an organization. They have the final say on who can access the data.

Question 2

Data Controller

Answer 2

manages how personal data is processed. This includes determining the purpose and means of data collection, storage, and use.

Question 3

Data Processor

Answer 3

processes data on behalf of a data controller. Data processors can’t do anything with the data other than what the data controller explicitly states.

often a third party

Question 4

Data Custodian

Answer 4

an IT professional who manages the security and storage of data sets.

manages access rights and security controls

Question 5

Data Protection Officer

Answer 5

responsible for organization’s data privacy
General Data Protection Regulation (GDPR).