Certified Information Privacy Professional (CIPP) Practice Questions

The correct term that describes Tom's role in relation to the survey data he filled out is "data subject." A data subject is an individual whose personal data is being collected, processed, or stored. In this scenario, Tom provided his political and religious views, which are considered personal information. Therefore, as the person providing this information, Tom qualifies as the data subject. In contrast, a data controller is responsible for determining the purposes and means of processing personal data. A data processor handles the data on behalf of the data controller and processes the data according to the controller's instructions. A data steward manages the data within an organization, ensuring its quality and compliance with data policies. None of these roles apply to Tom in this situation, as he is simply providing information rather than managing, processing, or controlling it.