CompTIA Security+ (SY0-701) — Question 49

A company's marketing department collects, modifies, and stores sensitive customer data. The infrastructure team is responsible for securing the data while in transit and at rest. Which of the following data roles describes the customer?

Answer options

• A. Processor
• B. Custodian
• C. Subject
• D. Owner

Correct answer: C

Explanation

The correct answer is C, Subject, as it refers to the individuals whose personal data is being collected and processed. Option A, Processor, refers to entities that handle data processing on behalf of the owner. Option B, Custodian, relates to those responsible for the safekeeping of data, while Option D, Owner, indicates the entity that has rights over the data, which does not apply to customers in this case.