Under the General Data Protection Regulation (GDPR), the term "controller" refers to a person, legal entity, public authority, agency, or any other body that determines the purposes and means of processing personal data. In simpler terms, a data controller is the entity that decides why and how personal data should be processed.
Key aspects of the role of a data controller under GDPR include:
1. **Purpose and Means:** The controller has the