Data controller
The person or organisation that decides why and by what means personal data is processed and is responsible for setting up and running the data filing system.
- 01
Why it matters
Most legal obligations sit with the data controller: informing people, data security, breach notification and answering requests. Using a service provider for a task does not remove that responsibility; making sure the provider works securely is also the controller's job.
- 02
Example
A clinic keeps patient records in a software company's cloud system. Because the clinic decides which data is kept and why, the clinic is the data controller and the software company is the processor.
- 03
Common mistake
Thinking that keeping data in the cloud with another company also hands the responsibility to that company. Responsibility lies with whoever determines the purposes and means.
- 04
Related terms
Related services and guides
Let's talk about your project.
Tell us what you need; we will define the scope together.