Governance

data user

Entity determining purposes and means of processing personal data.

Definitions (2)

The person or organization that, either alone or jointly with others, determines the purposes for which and the manner in which personal data is, or is to be, processed; the 2024 amendment substitutes the term 'data controller' for many provisions. The data user/controller bears primary obligations for compliance with the PDPA's principles, notices, registration and accountability duties.

Designates the entity or individual who has been granted authorization to access and process a dataset, typically under predefined terms and conditions set by the data holder. This role is fundamental in defining responsibilities within data processing workflows.