Controller (responsible party)

The person or entity who determines the purposes and means of processing personal data and is primarily responsible for ensuring that processing complies with legal obligations, including recordkeeping, obtaining authorizations/declarations, and implementing security measures.

The natural or legal person, authority, or other body that determines the purposes and means of processing personal data and is legally responsible for compliance with the Act's obligations, including declarations, authorizations and safeguards. Controllers must ensure lawful bases, implement protections and interact with the supervisory authority.