Data controller

The natural or legal person, public authority, agency or other body that determines the purposes and means of processing personal data. Controllers bear primary responsibility for ensuring processing complies with the law, implementing safeguards, enabling data subject rights, and demonstrating accountability.

The statutory replacement for the prior term 'data user', referring to the person or entity that determines the purposes and means of processing personal data and bears primary accountability for compliance obligations under the Act. Controllers must appoint Data Protection Officers and fulfil governance, notification and record-keeping duties introduced or clarified by the Amendment.

The media house, publisher, or editorial entity that determines the purposes and means of processing personal data in news production and publishing, bearing primary responsibility for compliance with data protection obligations under this guide and the Data Protection Act.

An entity that determines the purposes and means of processing personal data and bears primary responsibility for ensuring processing complies with the Bill's principles and obligations, including accountability, security measures, and responding to data subject rights.

An entity that determines the purposes and means of processing personal data used in or by AI systems, bearing responsibility for ensuring compliance with applicable data protection obligations (including privacy impact assessments, lawful basis for processing and coordination with the Nigeria Data Protection Commission).

An entity (typically the Ministry or a cooperating public body) that decides on the purposes and means of processing personal data in the context of consular digital services and is thus responsible for complying with applicable data protection obligations and safeguards.

A natural or legal person who alone or jointly with others determines the purposes and means of processing personal data and who bears primary responsibility for ensuring that processing complies with the law, including obligations such as registration, breach notification, and responding to data subject rights.

A government agency or non-governmental entity that collects, processes, or uses personal data and thereby bears primary legal obligations under the PDPA to ensure lawful collection, purpose limitation, security, and fulfillment of data subject rights.

A person (natural or juristic) who alone or jointly with others determines the purposes and means of processing personal data; the controller bears primary legal responsibilities under the PDPA to ensure lawful bases, implement safeguards, respond to data subject rights, and comply with record‑keeping and other obligations.

The person or organization that alone or jointly with others determines the purposes and means of processing personal data under Law No. 6698; the Guide emphasizes controllers' responsibility for ensuring AI projects comply with data protection obligations, including lawful bases, DPIAs, and contractual allocation of roles with processors.

An entity that determines the purposes and means of personal data processing in relation to chatbot systems and therefore bears primary responsibility for compliance with Law No. 6698, including registration, transparency, security measures, and data-subject rights facilitation.

A person or entity that determines the purpose for which and the manner in which personal data is processed. Data controllers are required to register with the Data Protection Commission and are responsible for ensuring compliance with data protection principles, security measures, and legal obligations under Ghanaian law.

A role defined consistent with Ghana’s Data Protection Act and referenced by the Strategy: an individual or organisation that determines the purposes and means of processing personal data and bears primary responsibility for ensuring compliance with data protection obligations, including registration and lawful handling.

An entity that determines the purposes and means of processing personal data and is responsible for ensuring compliance with legal obligations under the Proclamation, including registration with the ECA and implementing required safeguards.

The natural or legal person who determines the purposes and the means of processing personal data and is responsible for ensuring compliance with the law's obligations regarding that processing.

A person or entity that determines the purposes and means of processing personal data and is primarily responsible for ensuring compliance with the Bill's obligations, including registration, record-keeping, and implementing appropriate safeguards.

An organization or body that determines the purposes and means of processing personal data in line with Qatar's Personal Data Privacy Protection Law (Law No. 13 of 2016); responsible for ensuring lawful collection, consent, retention, transfer and protection of personal data used in AI systems.

A person who, either alone or jointly with others, determines the purposes for which and the manner in which any personal data is processed.

The natural or legal person or public authority that determines the purposes and means of processing personal data.

The natural or legal person, public authority, or agency which, alone or jointly with others, determines the purposes and means of the processing of personal data.

The natural or legal person, public or private, who decides on the database and/or the processing of the data; in the context of this pilot the Bogotá Metropolitan Police and TransMilenio act as data controllers and are responsible for demonstrating compliance with data protection principles.