Skip to content

Joint Controllers

What is Joint Controllers?

Two or more entities that jointly determine the purposes and means of processing personal data, sharing data protection responsibilities.

Privacy and Data Protection

Each of these is named in at least one of the same controls as joint controllers. The number is how many controls name both.

What the standards actually require on joint controllers

Requirements naming joint controllers across 6 standards, quoted from the control text.

Two or more controllers that jointly determine purposes and means must set out transparently, in a written agreement, their relationship and respective responsibilities for complying with the Law, in particular for data subjects' rights and the information dut...

albania-law-no-124-2024-on-personal-data-protection::24 · Article 24: joint controllers and their written arrangement →
GDPR2 controls

Where two or more controllers jointly determine the purposes and means of processing, determine their respective responsibilities for compliance in a transparent manner by an arrangement between them, unless those responsibilities are already determined by Uni...

GDPR-Art.26 · Joint controllers →

Chapter II Section 7 establishes data security obligations. Controller and processor shall apply appropriate technical + organisational measures + procedures to protect personal data and the privacy rights of data subjects.

HU-INFOTV-Chap2-Security-Section-7-Processor-Joint-Controllers · HU Infotv Chap II - Section 7 Data Security + Processor + Joint Controllers + Breach Notification (Sections 25-25K) →

Article 43: where two or more controllers jointly determine purposes and means they set out their respective responsibilities, especially for rights and information duties, in a transparent arrangement unless a law does so, may name a contact point, and make t...

serbia-law-on-personal-data-protection-2018::43 · Set out joint controllers' responsibilities in a transparent arrangement →

Joint controllership arises where two or more entities jointly determine purposes and essential means, an essential criterion being that the processing would not be possible without their concurrent involvement so that each party's processing is inextricably l...

edpb-guidelines-1-2026-on-processing-of-personal-data-for-scientific-research-purposes::7.3 · 7.3 Joint controllers: joint determination of the protocol, an Article 26 arrangement reflecting differing responsibilities and made available to data subjects, processors engaged on agreed terms →

Questions people ask about joint controllers

What is Joint Controllers?
Two or more entities that jointly determine the purposes and means of processing personal data, sharing data protection responsibilities.
Why is Joint Controllers important for compliance?
Joint Controllers is a key concept in Privacy and Data Protection. Understanding joint controllers helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Joint Controllers?
Joint Controllers appears in the requirement text of Jamaica Data Protection Act 2020, Albania Law No. 124/2024 on Personal Data Protection, GDPR, Hungary Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Info Act), Serbia Law on Personal Data Protection (2018). Across these standards we have identified 14 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Joint Controllers?
Explore our compliance framework pages to see how joint controllers applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Joint Controllers applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.