Who is legally responsible for data placed into the system that was initially generated by a CMO?

The OBP who owns the account under which the data was uploaded. Data upload is always the responsibility of the connection owner (OBP).
​