Compliance

Data controller/processor

Entities determining or processing personal data for AI systems.

Definition

Distinct roles identifying parties that determine the purposes and means of personal data processing (data controller) and parties that process personal data on behalf of controllers (data processor); both are subject to the policy’s data governance safeguards such as minimisation, consent and access controls.