data controller

A data controller for the purposes of the Data Protection Act 1998 UK is a legal person who "determines the purposes for which and the manner in which any personal data are, or are to be processed": s 1(1).

A data controller is not necessarily one legal person and may be two or a number of persons or companies.

Generally speaking a data controller must be a person or business resident or incorporated in the UK; uses equipment in located in the UK or has an office in the UK.

Usage: The employer, when engaging new staff acted as a data controller when processing the new employee's data.

Related Words: Data Protection Act 1998 UK; personal data; sensitive personal data; data processor; data subject.