Which of the following is NOT a responsibility of a data owner?

A.
Maintaining and protecting data

B.
Ensuring that the necessary security controls are in place

C.
Delegating responsibility of the day-to-day maintenance of the data protection mechanisms to the data custodian

D.
Approving access requests