Data Owner

Definition: Data Owner ABB is a Business Role being assigned to individual who creates or generates the data or the entity that has legal ownership or control over the data. In other cases, a data owner might be the individual or entity that is responsible for managing or overseeing the use of the data. It can be mapped with Data Controller from the GDPR, under the European General Data Protection Regulation (GDPR), a "data controller" is defined as the entity that determines the purposes, conditions, and means of the processing of personal data. This means that the data controller is the entity that decides why and how personal data is processed.

Source: GDPR

Source reference: https://eur-lex.europa.eu/eli/reg/2016/679/oj

Last modification: 2024-01-28

Identifier: http://data.europa.eu/dr8/DataOwnerBusinessRole

LOST view: Organisational view

EIRA concept: eira:ArchitectureBuildingBlock

ABB name: eira:DataOwnerBusinessRole

Synonym: Data Holder (DGA), Data Creator (SiMPL)

Example: The following implementation is an example on how this specific Architecture Building Block (ABB) can be instantiated as a Solution Building Block (SBB): In the GDPR, "controller", or "processor" on behalf of the "controller" are examples of the data owner role defined for this ABB. See GDPR https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R067… , Article 4, Definitions.

Interoperability Saliency: The Data Owner ABB is salient for organisational interoperability because it is responsible for the management of the data generated or consumed by the public service. The identification of Data Owners, as stated in the GDPR, is important for accountability since it identifies a person/team responsible to control the compliance of data, and for the definition of policies and standards for the alignment of public service data to GDPR.

Additional information: Data owners may not work with their data every day, but are responsible for overseeing and protecting a data domain. In the context of the GDPR, data owners are accountable for the quality, integrity, and protection of their data space. In SiMPL (https://digital-strategy.ec.europa.eu/en/news/simpl-cloud-edge-federati…), the data owner is the legal entity that has sovereignty over the data, usually the creator of the data or the one who executes control over the data. See SiMPL requirements and architecture vision document. The Data Governance Act does not define the concept Data Owner, but intrinsically this role can be assigned also to the Data Holder, since "holding" usually entails "controlling".

Interoperability Dimension: Governance IoP

Viewpoint: Interoperability Privacy viewpoint

Additional identifier: http://data.europa.eu/dr8/DataOwnerBusinessRole

EIF Layer: Organisational