Custodian is generally used to refer to the entity that is responsible for storing, processing, and/or safeguarding data. This term is often used in contrast to other terms such as controller or processor.
The Electronic Discovery Reference Model (EDRM) defines a custodian as “a person or organization that has possession of, or access to, information that is relevant to a legal matter.” In the context of text analytics, custodianship may refer to data that is stored in an organization’s systems (e.g., email servers, databases), or it may refer to data that is processed by an organization (e.g., through text analytics software).
Custodian vs. Steward
Custodian is sometimes used interchangeably with steward. However, there is a subtle difference between the two terms. A custodian is responsible for the safety and security of the data, whereas a steward is responsible for managing the data.
Custodian vs. Data Owner
The term custodian is sometimes used interchangeably with data owner. However, there is a subtle difference between the two terms. A custodian is responsible for the safety and security of the data, whereas a data owner is responsible for the accuracy and completeness of the data.
Custodian vs. Data Subject
Custodian is sometimes used in contrast to data subject. A data subject is an individual who is the focus of personal data. In the context of text analytics, a custodian would be responsible for storing and processing the data, while a data subject would be the individual who is the focus of the text analytics.
Custodian vs. Processor vs. Controller
Custodian is often used in contrast to other terms such as processor or controller. A processor is an entity that processes data on behalf of a controller. A controller is an entity that determines the purposes, conditions, and means of the processing of personal data.
In the context of text analytics, a custodian would be responsible for storing and processing the data, while a controller would be responsible for determining the purpose of the text analytics.
In the context of data privacy, a controller is the entity that determines the purposes and means of processing personal data, while a processor is an entity that processes personal data on behalf of the controller. In some cases, a single entity may serve as both the controller and processor.