thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Foundational

Data Controller

Entity that determines the purposes and means of processing personal data.

Definition

The controller bears primary responsibility for GDPR compliance, including lawful basis, transparency, data subject rights, DPIAs, and breach notification to authorities. Controllers must use only processors providing sufficient guarantees and bind them by contract under Article 28. US privacy laws use similar concepts, such as business under CCPA.

Example

A retailer deciding to collect customer emails for loyalty marketing is the controller.

Exam tip

Whoever decides why and how data is processed is the controller, regardless of who holds it.

Don't confuse it with

Related terms