Must not be an IT person only but someone knowledgeable about the legal frameworks, such as FOIA, Privacy, Information Quality.