Which term is a role that is responsible for the oversight of any kind of privacy-related data?

• A. GDPR
• B. Data Steward
• C. Data Custodian
• D. Privacy Officer

Answer: (D)

The concept tested here is who is empowered to oversee privacy-related data across an organization. The Privacy Officer is the one responsible for the privacy program and its governance, ensuring personal data is handled in line with applicable laws and internal policies. This role coordinates with legal, security, IT, and business units, manages privacy risk, oversees data handling practices, and handles data subject requests and privacy impact assessments.

GDPR is a regulation, not a role, so it isn’t the person who oversees privacy data. A Data Steward concentrates on data quality and governance within business domains, not specifically on privacy oversight. A Data Custodian manages the technical aspects of data—storage, access controls, backups—under policy, but the privacy program’s accountability sits with the Privacy Officer.