A Data Custodian is a person or group who is responsible for the receipt, transfer, accounting, safeguarding, and destruction of data in accordance with company policy, laws, or regulations.
In addition to abiding by the organizational Records Management policies and procedures, auditors must also fulfill legal, regulatory, or industry-standard requirements. This depends on whether their role is as the internal or external auditor and what business or regulatory body governs the data type.