Controller

The natural or legal person, authority, agency, or other body that determines the purposes and means of personal data processing. Controllers bear primary obligations under the PDPL, including ensuring lawful bases for processing, implementing safeguards, registering when required, appointing a DPO if mandated, and responding to data subject rights.

The entity that determines the purposes and means of processing carried out by an AI system and thus bears responsibility for ensuring compliance with rights-protecting obligations, including coordination with data protection rules when personal data is processed.

The natural or legal person who determines the purposes and means of processing personal data under the Law, bearing primary responsibility for complying with processing obligations and for ensuring lawful, transparent handling of electronic personal data.

A natural or legal person or public body that determines the purposes and means of processing personal data and bears primary responsibility for compliance with the Act's obligations.

The natural or legal person that determines the purposes and means of processing personal data and bears primary responsibility for ensuring compliance with data protection obligations, including implementing appropriate technical and organisational measures.

The natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data and bears responsibility for complying with the Act's obligations.

The natural or legal person, public authority, or agency which, alone or jointly with others, determines the purposes and means of the processing of personal data.

The person or entity who determines the purposes and means of processing personal data and is primarily responsible for ensuring that processing complies with legal obligations, including recordkeeping, obtaining authorizations/declarations, and implementing security measures.

The natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data and bears primary responsibility for compliance with the law, including implementing security measures, responding to data-subject rights, and maintaining records of processing activities.

The person or legal entity that alone or jointly with others determines the purposes and means of processing personal data and bears primary responsibility for compliance with the Act's obligations, including lawful basis, notice, and data subject rights.

The natural or legal person, public authority, agency or other body that, alone or jointly with others, determines the purposes and means of processing personal data; responsible for ensuring compliance with legal bases, data subject rights, security measures, record-keeping and interaction with the CNIL. The law adopts the GDPR-aligned definition while preserving national statutory references.