A data owner decides on the data classification, the data retention, the level of protection, the data controls and is responsible for approving access to the data.