What is a data custodian responsible for?

A data custodian's role involves the operational aspects of data management, including the physical or technical safe custody of data, its secure transport, proper storage, and the implementation of business rules (e.g., access controls, retention policies) defined by the data owner. They are the 'hands-on' managers of the data, ensuring it is protected according to policy.

Data content, context, and associated business rules are typically the responsibilities of the data owner or data steward, who define what the data is and how it should be used.

While custodians implement controls that may generate logs and alerts, 'logging and alerts for all data' is too broad and doesn't encompass the full scope of a custodian's physical/technical management responsibilities.

Customer access is an aspect of data usage, and while custodians implement access controls, defining who accesses data (especially customers) is typically a data owner's or data steward's responsibility, not the custodian's primary role.