Compliance

Data custodian

Entity responsible for processing and protecting personal data.

Definitions (3)

A designated controller/processor (referred to in the draft as a 'custodian') required to register with the Data Protection Board when processing citizens' data. Custodians bear obligations including maintaining processing records, appointing responsible officers, implementing technical and organisational measures, and complying with registration and reporting requirements.

An organisation or actor that collects, processes, stores, or manages datasets on behalf of any principal; custodians have obligations to apply anonymisation standards, publish metadata, respond to sharing requests, and comply with NPDA oversight and registration where applicable.

A technical role responsible for the secure storage, technical controls and operational maintenance of systems that hold data assets, including implementation of encryption, backups, access controls, network protections and secure disposal in line with policies.