Ideally, those who are part of an organization’s data governance team (consisting of information system stakeholders), along with other departments and team members such as the legal counsel, record managers, and system security staff, must complete a PIA.