Specific information and the controls that govern its collection, creation, processing, access, dissemination, and disposal are the responsibility of the person in charge. The owner of a collection of information is the person who is accountable for the business consequences of a system or the commercial use of that information. Where appropriate, managers from other departments may share ownership.
