A public-health dataset of clinic encounters is stored by IT and processed by a contracted analytics firm under the health department’s instructions. Which role pairing is most accurate?
Select an answer to reveal the explanation.
Short Explanation
Owners/controllers decide why the health data exists and what is allowed; custodians/stewards keep it safe day to day; processors handle it on someone else’s instructions. Here the health department steers purpose, IT shepherds the systems, and the analytics contractor processes under contract. Read access alone does not crown someone controller.
Full Explanation
Governance roles distinguish accountability for data: owners (and, in privacy regimes, controllers) determine purposes and accountability; custodians/stewards protect and maintain data and systems; processors handle data on documented instructions. A public-health department typically retains ownership/control of clinic encounter data, IT custodianship, and a contracted analytics firm as processor. Access alone or IT personal ownership claims misassign those roles.