Which of the following is NOT a responsibility of a data owner?

A. Maintaining and protecting data
B. Ensuring that the necessary security controls are in place
C. Delegating responsibility of the day-to-day maintenance of the data protection mechanisms to the data custodian
D. Approving access requests