The city moves citizen service requests into a SaaS help-desk product. Who remains accountable for how that citizen data is classified and shared?
Select an answer to reveal the explanation.
Short Explanation
Handing the help-desk app to SaaS is like hiring a warehouse—you still own what is in the boxes. The city keeps accountability for classifying and sharing citizen data; the vendor hosts, it does not become the records owner.
Full Explanation
Under shared responsibility and public-sector governance, organizations retain ownership and accountability for their data even when a SaaS provider operates the platform. Classification, sharing rules, and lawful use remain the customer's duty. Assuming the vendor or network path absorbs all compliance obligations is incorrect.