When developing a privacy program and selecting a program sponsor or "champion" the least important...

Are a part of the organization's top management

Have the authority to approve policy and provide funding.

Will be an effective advocate and understand the importance of privacy.

Have accountability for the organization's privacy and/or information security, risk, compliance or legal decisions.