What is a data steward?
A data steward is responsible for the quality and proper use of a data set. Where the data owner decides how data is classified and who may use it, and the custodian runs the systems that hold it, the steward makes sure the data itself is accurate, consistently defined and handled the way policy says. Stewards are usually subject-matter experts in the business area that produces the data, such as a finance analyst who looks after the general ledger's account codes, and they often report to the data owner or to a data governance office.
What a data steward does
- Writes and maintains business definitions, so that "active customer" or "hire date" means the same thing in every report.
- Sets data quality rules, such as required fields and valid formats, and tracks errors, duplicates and gaps.
- Keeps metadata and lineage current in the data catalog: where data came from, which systems use it and who to ask about it.
- Checks that records and files carry the classification label the owner's policy requires.
- Confirms that data is collected and used within its stated purpose, for example that marketing consent is recorded before an address is used for a campaign.
- Escalates problems to the owner, who decides on fixes and on risk.
Example: a duplicate that broke consent
A customer who opted out of marketing email keeps receiving it. The steward for customer data finds three CRM records for her, created by the web store, the call center and a trade-show import, and only one carries the opt-out flag. The steward merges the records, sets a rule that the most restrictive consent value wins whenever duplicates are merged, and adds a weekly duplicate report. While reviewing, the steward also finds a call center export labeled Internal that contains full dates of birth, which policy classifies as Confidential, and raises it with the owner so it can be relabeled and restricted.
Data steward vs. owner, custodian and operator
| Role | Focus | Typical verbs |
|---|---|---|
| Data owner | Accountability and decisions | Classifies, approves, accepts risk |
| Data steward | Meaning, quality and proper use | Defines, cleans, labels, monitors use |
| Data custodian | Technical protection | Configures, encrypts, backs up |
| Data operator | Daily hands-on work | Enters, updates, runs reports |
Organizations draw these lines differently, and older study materials sometimes list custodian and steward as one role. The useful split is that the steward looks after the data's content and use, while the custodian looks after the systems and controls around it.
Data steward on the CompTIA Security+ exam
Data roles fall under SY0-801 objective 3.3, which covers knowing what data an organization holds and how it is protected. Wording such as "responsible for data quality and accuracy", "maintains metadata and definitions" or "ensures data is labeled and used in line with policy" points to the data steward. Distractors include the data custodian, who implements technical controls such as encryption and backups; the data owner, who decides and is accountable; the data protection officer, who monitors compliance with privacy law; and the data processor, a separate organization working for a controller.