What is a CDO?

A CDO, or Chief Data Officer, is the senior executive accountable for how an organisation collects, governs, protects and creates value from its data. The role owns the data strategy, the rules that keep data accurate and lawful, and the work of turning raw records into decisions, products and revenue. Put simply, the CDO is the person who makes sure the business treats its data as an asset rather than an accident.

The title also carries a second meaning in some firms. CDO can stand for Chief Digital Officer, the executive who leads digital transformation and customer-facing technology. The two are related but distinct. This page focuses on the Chief Data Officer, and flags where the digital remit overlaps so you can tell which one a job advert or board paper is really describing.

What a Chief Data Officer actually does

A good CDO spends very little time on dashboards and a great deal on the conditions that make data trustworthy. The work splits into a few durable responsibilities. They set data strategy, deciding which data the organisation should prioritise and what value it is meant to unlock. They own data governance: the policies, ownership and quality standards that stop the same customer appearing five different ways across five different systems. They lead on data privacy and lawful use, working closely with whoever holds the security remit so that personal data is handled in line with UK GDPR and the Data Protection Act.

Beyond that, the CDO builds the capability to act on data. That means analytics, reporting that the board can actually rely on, and increasingly the safe adoption of machine learning and AI. Where a business is racing to deploy AI, the CDO is usually the person insisting on clean inputs and clear accountability before models touch real decisions, which is exactly the discipline our AI governance work is built around.

When a business actually needs a CDO

Most small companies do not need a Chief Data Officer, and pretending otherwise wastes money. The role starts to pay for itself when data becomes either a serious risk or a serious opportunity, and usually both at once. Tell-tale signs include reporting that nobody trusts, regulatory exposure around personal data, an acquisition that has bolted together incompatible systems, or an AI ambition that keeps stalling because the underlying data is a mess.

For mid-market organisations the honest answer is often that a full-time CDO is premature, but the accountability still has to live somewhere. That is the gap a fractional or interim leader fills. Our fractional CIO and CISO model exists for precisely this situation, and the same logic that drives digital transformation in the mid-market applies to data leadership. You buy the judgement and the strategy without carrying a six-figure permanent salary before the role has proven its return.

How the CDO differs from the CIO, the CTO and the CISO

The fastest way to understand a CDO is to draw the lines between it and the roles it sits beside. The CIO runs the technology that keeps the business operating: the systems, the infrastructure, the IT estate. If you want to understand that remit, our IT strategy consulting page covers it in depth, and the practical reality of plugging a CIO gap is set out under interim CIO leadership. The CTO is generally outward-facing, owning the product and engineering that the business sells.

The CISO owns security: protecting the organisation from cyber threats and managing risk, a remit we describe across CISO as a service and virtual CISO. The CDO is different again. Where the CISO asks “is this data safe”, the CDO asks “is this data correct, lawful and useful”. The two overlap heavily on privacy and on incident handling, which is why a serious incident response plan always treats data and security as a single conversation. The roles are complementary, not interchangeable, and the worst outcomes happen when a business assumes one person quietly covers all four.

The CDO, the vCIO and the fractional model

Data leadership does not have to arrive as a permanent hire. A virtual or fractional executive can carry the CDO remit alongside or inside a broader technology mandate, which is how most mid-market organisations buy it sensibly. The virtual CIO model, explained on our vCIO page, often absorbs data strategy as part of a wider technology brief, and the same is true of the virtual CISO remit set out under what is a vCISO.

This matters because data, technology and security decisions are tangled together. The choice to centralise customer data is a strategy decision, a security decision and a governance decision at the same time. A fractional leader who holds more than one of those hats can make the trade-off coherently rather than refereeing a turf war between three separate executives. If you are sizing the cost of any of these options, the CIO and CISO cost calculator and our transparent pricing give you real numbers to work with.

Where data leadership and risk collide

The reason data leadership has climbed the agenda is that getting it wrong is expensive. The IBM Cost of a Data Breach Report 2025 puts the global average breach at USD 4.44 million, and UK regulators have shown they will act: the ICO fined British Airways £20 million in 2020 and Interserve £4.4 million in 2022. Those penalties followed failures in how personal data was protected and handled, which sits squarely where the data and security remits meet.

A CDO who works in step with the security function reduces that exposure by keeping data minimal, accurate and accountable. The regulatory weight is only growing, which is why directors increasingly want this on the agenda through board cyber governance and why frameworks such as NIS2 compliance treat data and resilience together. The uncontrolled spread of tools, captured under shadow AI, is now one of the largest data governance headaches a CDO has to confront.

Why Starkhorn

Starkhorn is led by Daniel J. Jacobs, who has spent over 20 years in technology and security, 15 of them in leadership roles, including Interim Group Technology Director at VetPartners, the BC Partners-backed veterinary group, and CIO and CISO at Jardine Motors Group. He is the author of The Strategy Bridge and holds PRINCE2, ITIL Foundation and full membership of the Institute of Interim Management.

That experience of owning technology and security at group level, across a private equity-backed veterinary group and a national motor retailer, means the data strategy, governance and risk decisions a CDO is hired to make are exactly the ground Daniel has led on in practice.

Frequently asked questions