Exam CISSP topic 1 question 250 discussion

IDEAL stands for Informational Disclosure Avoidance Language, a privacy framework used by the United States Census Bureau. In an IDEAL encryption system, sensitive data is encrypted to prevent unauthorized access or disclosure. The data owner is responsible for controlling access to the encryption key, which is used to decrypt the data.

D is correct

CISSP Official Study Guide pg 213 - "Know the responsibilities of data roles. The data owner is the person responsible for classifying, labeling, and protecting data. System owners are responsible for the systems that process the data. ... A custodian has day-to-day responsibilities for protecting and storing data. "

The data owner is the person or organization that has created, owns or is responsible for the data, and they might have the interest in protecting the data integrity, confidentiality and availability. They might also have the right to decide who can access their data, and therefore they might be responsible for the decryption key. In some scenarios the data owner and the data custodian are the same person or entity, but in others the data owner could have access to the encryption key, they can delegate it to a data custodian or to a specific person or team to manage it.

I mean they are the ones that work with the data! So, yea "D".

Answer is correct https://www.cloudmask.com/blog/where-are-your-encryption-keys-and-who-has-control-over-them