Most companies now agree they need a first-party data strategy. Fewer agree on who owns it, and that ambiguity kills more strategies than any technical gap does. The honest answer is that ownership splits three ways, and getting the split right is most of the work.
The premise all three executives share: direct customer relationships are worth more than rented ones. Those relationships run on a two-way value exchange in which the customer gets something real and the brand earns the data. Everything below is division of labor on that one idea.
The CMO owns use cases and outcomes
Marketing decides what the data is for. That starts with mapping gaps in the customer experience, online and offline, and designing interactions worth the trade. A car manufacturer can help a buyer configure the right model before purchase and deliver after-sales service that feels like an extension of the brand. Trust builds, the relationship compounds, and the data follows.
The CMO also owns the metrics that prove the strategy is working: conversion rates, customer lifetime value, retention. If activation does not move those numbers, the strategy is a data collection hobby.
The CTO owns pipelines and integration
The technology function usually already knows what data the brand collects, which makes it the natural owner of the plumbing: consolidating sources into a warehouse or lake, keeping identities consistent across systems, and building the delivery paths that move events out, including server-side tracking and Conversions API connections to the ad platforms. A brittle pipeline taxes every campaign built on top of it, so reliability here is a marketing outcome, even though marketing never sees the code.
The CIO and legal own governance, consent, and compliance
Someone has to define who owns which data, set quality standards, and put real security controls around all of it. That is the CIO’s job, working with legal: consent captured and recorded at the point of collection, retention rules enforced, and every activation defensible under whichever privacy regime applies in each market. This is unglamorous and it is what keeps the other two functions out of trouble. It is also the standard we hold our own platform to; the details are on our security page.
Why one owner fails
When marketing owns everything, pipelines get built as campaign-shaped one-offs and compliance becomes an afterthought. When technology owns everything, the data gets collected and modelled and never activated. When governance owns everything, the strategy turns into a list of prohibitions. Each function optimizes for what it can see, and each blind spot is expensive.
The fix from the original 2023 version of this article still holds: plan together from the start. The three functions jointly decide which data matters to the use cases, what infrastructure captures and stores it, and what rules protect it. Communication sounds like soft advice, but asking the right questions together, with each leader putting themselves in the customer’s shoes, is the actual mechanism.
The shared deliverable is personalization
Where the three meet is the personalized customer experience: targeted campaigns, relevant product recommendations, service that remembers the customer. None of that ships with one owner. It needs the CMO’s use case, the CTO’s pipeline, and the CIO’s guardrails at the same time.
Datahash Signals sits at the seam, moving consented first-party events from the CTO’s infrastructure to the platforms where the CMO’s outcomes happen, within the rules the CIO set.
If your three functions are still negotiating the split, talk to our team about where activation fits.