Sign in Subscribe

Topic

Controller

Controller refers to an organization or other entity that determines why and how personal data is processed. Under the GDPR, controllers have primary responsibility for complying with data protection requirements. Similar concepts appear under the CCPA, Colorado Privacy Act (CPA), and other U.S. state privacy laws, although definitions and obligations vary. Explore controller responsibilities, processor relationships, joint controllers, and contractual requirements.

Controller-to-Processor Transfers: What Article 28 GDPR Requires

A practical guide to Article 28 GDPR requirements for controller-to-processor relationships, covering mandatory contracts, processor due diligence, required terms, sub-processor authorization, liability, security, oversight, and the distinction from international data transfer rules.