Which role is primarily responsible for the disposal of personal information within a mortgage entity?

• A. The compliance officer
• B. The IT security team
• C. The PLM
• D. The legal department

Answer: (C)

Disposal of personal information is a data lifecycle governance task in mortgage operations. The PLM is the role that owns lending processes and their data handling, including creating and enforcing retention and secure destruction policies. They ensure disposal procedures meet regulatory and contractual requirements and oversee training, audits, and coordination with IT to implement secure destruction. IT security handles the technical steps to destroy data, but the PLM provides the policy, accountability, and oversight across the organization. Compliance and legal support the framework, but the primary ownership for disposing personal information rests with the PLM.