An IT governance committee wants to ensure there is a clear description of the "data owner" in the enterprise data policy. Which of the following would BEST define the owner of data stored in an…

The data owner is fundamentally a business role, not a technical or contractual one, and is typically the business leader who is ultimately accountable for the data's quality, integrity, and privacy, as they are most impacted by its loss or compromise. This aligns with the principle that data ownership resides with the entity or individual whose core business operations rely on and are directly affected by that data.

The risk manager is responsible for identifying and mitigating risks associated with data, but not for the ultimate ownership or business accountability of the data itself.

The contract manager handles the contractual relationship with the cloud provider, but they do not own the business data; their role is managing the agreement.

A vendor who submits data is a data provider or data subject, but they do not own the data once it is collected and managed by the organization.