The END USER is responsible for periodic reconfirmation of the access lists, database development & use of systems he/she owns.
The CUSTODIAN is in charge of the coordination of the user access list reviews but does not have any responsibility for data access.