Skip to content

Privacy Hub · plain-language reference

← Privacy Hub
Term
ZW CDPA
EU GDPR
GB UK GDPR

Data controller

Also known as: controller, data owner, information controller, joint controller, organisation responsible for data

In plain language

The organisation that decides why and how personal data is used. If you set the purpose, you are the controller — even if someone else runs the systems.

For example

A clinic deciding what patient information to collect and why is the controller, even if a cloud vendor stores it.

Go deeper

A data controller is the person or organisation that decides why personal data will be used and the essential means of using it. A controller remains responsible even when another organisation processes the information on its behalf. The legal test, licensing duties and terminology can vary, so check the jurisdiction view for the rules that apply.

Learn more: read the full article

Education, not legal advice.