A company's marketing department collects, modifies, and stores sensitive customer data. The infrastructure team is responsible for securing the data while in transit and at rest. Which of the following data roles describes the customer?

The correct answer is Subject. In data privacy frameworks like GDPR, a data subject is the identified or identifiable natural person to whom personal data relates. In this scenario, the customer is the individual whose sensitive data is being collected and processed. Processor is incorrect because a processor is an entity that processes personal data on behalf of the controller (e.g., a cloud service provider). Custodian is incorrect because a custodian is responsible for the safe keeping, maintenance, and protection of data, often an IT role. Owner is incorrect because the owner (or controller) is the entity that determines the purposes and means of processing personal data (e.g., the company's marketing department).