A global retailer is formalizing its privacy program. The privacy strategy has executive sponsorship, and a cross-functional committee exists. However, during a recent data subject access request, no one could determine who was responsible for locating the data, who approved the response, and who was ultimately accountable if the request was mishandled. The privacy officer wants to prevent this ambiguity across all privacy activities. Which action would MOST effectively address the root cause?