Which of the following is NOT a responsibility of a data owner?

A.
Delegating responsibility of the day-to-day maintenance of the data protection
mechanisms to the data custodian

B.
Approving access requests

C.
Ensuring that the necessary security controls are in place