2.8 Data Business Owners

As explained above, an organisation may choose to make staff members, which are responsible for initiating a processing of personal data at operational level, part of the overall governance of the Privacy Management Program by designating them as “Data Business Owners” responsible for ensuring as a minimum that “their” processing activities are properly documented in a processing sheet. 

Further responsibilities may be given to Data Business Owners as part of an Organization’s Privacy Management Policy and Procedures.  

Once a staff member has been designated as data business owner, their name will be logged in the record on the relevant processing sheet. 

Designated data business owners shall have access to the processing sheets under their responsibility in the TPOmap Documentation Depository