Definitions | The person or function with statutory or operational authority over the information. The information owner has a (possibly legally binding) duty of care over the information. The information owner is held accountable for the definition and oversight of the policies, requirements and controls that govern information generation, collection, processing, access, modification, dissemination, and disposal. |
|---|