A controller compliant with the EU General Data Protection Regulation (GDPR) is an organisation or private individual who is the data controller for the data to be formed. The controller determines the purpose and means of processing for the data to be formed on the basis of an issued data permit decision.

There may be more than one controller and the controllers can be joint controllers, which means they will together determine the purpose and means of processing for the data to be formed on the basis of an issued data permit decision. In the case of joint controllership select ‘no’ and enter the names of all controllers into the additional information field.