Data Controller
What is Data Controller?
Under GDPR, the entity that determines the purposes and means of processing personal data. The controller bears primary responsibility for compliance.
Related terms
Frameworks that govern data controller
What the standards actually require on data controller
Requirements naming data controller across 6 standards, quoted from the control text.
A data controller and (since 1 April 2025) a data processor must, when processing personal data, take practical steps to protect it from loss, misuse, modification, unauthorised or accidental access or disclosure, alteration or destruction, having regard to th...
malaysia-pdpa-2010::9(1) · Section 9(1): practical security steps by data controllers and data processors, having regard to five factors →A controller engaging a processor, or a processor engaging another processor, ensures that the engaged processor complies with the principles and obligations of the Act as they apply to the controller;
nigeria-data-protection-act-2023-ndpa::29 · Obligations of the data controller and data processor when engaging a processor →Controllers and processors ensure personal information is processed in line with the right to privacy, lawfully, fairly and transparently, for explicit, specified and legitimate purposes, adequately and no more than necessary, with a valid explanation when fam...
zimbabwe-data-protection-act-2021::s.13 · Duties of data controllers and processors →Ghana DPA 2012 Part Four - Registration + Controller/Processor Obligations. REGISTRATION (Sec.41-46): all data controllers + processors processing personal data in Ghana must REGISTER with DPC + complete REGISTRATION APPLICATION (Sec.42) including organization...
GhDPA-Registration-Controller-Processor · Data Controller + Processor Registration and Obligations (Part Four) →A person who intends to be a data controller or data processor must register with the supervisory authority, indicating their identity and designated single point of contact, the identity and address of any representative, a description of the personal data to...
rwanda-dpl::29-30 · Registration as a data controller or data processor →Sets the minimum standard under section 37(1). Security measures must include organisational and technical measures and, where needed, physical measures;
pdpa-thailand::N-SECURITY-2022 · PDPC Notification on security measures of the data controller B.E. 2565 (2022) →Questions people ask about data controller
What is Data Controller?
Why is Data Controller important for compliance?
What concepts are related to Data Controller?
Which compliance frameworks address Data Controller?
Where can I learn more about Data Controller?
See how Data Controller applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.