Association of Chartered Certified Accountants (ACCA) Certification Practice Test

Who is responsible for the security of personal data?

1. The government only

2. The individual holding the data

3. Data subjects only

4. Third-party vendors

The correct answer is: The individual holding the data

The responsibility for the security of personal data lies predominantly with the individual holding the data. This individual, often referred to as a data controller in regulatory contexts, is accountable for ensuring that personal data is handled in compliance with applicable data protection laws and regulations. This includes implementing appropriate technical and organizational measures to protect the data from unauthorized access, breaches, or any misuse. While various parties may play a role in the overall security of personal data, such as the government through legislation, third-party vendors who may process data, and data subjects who have rights over their data, the primary duty rests with the individual or organization that collects and manages that data. This emphasizes the importance of awareness and proactive management of personal data security measures by those in control of the data, ensuring that personal data is safeguarded throughout its lifecycle.