Data protection & AI

Controller (data controller)

Published Reviewed

Written and reviewed by Fredrik Surtell

The controller is the organisation that determines the purposes and means of processing personal data — why data is processed and, in essentials, how. The controller carries the GDPR’s accountability: lawful basis, information to data subjects, breach notification, and contracts with any processors. Two organisations deciding purposes together are joint controllers and must allocate responsibilities between them.

Läs definitionen på svenska: Personuppgiftsansvarig

Also known as: Joint controllers · Gemensamt personuppgiftsansvariga

Where this term does its work

This definition is general information, not legal advice. Always verify the current official source.