Legal

Joint Controller

Two or more controllers who jointly determine the purposes and means of processing personal data.

Joint controllers exist when two or more data controllers jointly determine the purposes and means of processing personal data.

Requirements

Joint controllers must enter into an arrangement that transparently determines:

  • Their respective responsibilities for compliance
  • Who handles data subject rights requests
  • Their respective roles in providing information to data subjects

The essence of the arrangement must be made available to data subjects.

Key Point

Regardless of the terms of the arrangement, a data subject may exercise their rights against any of the joint controllers.

GDPR Article 26.

Related Terms

Data ControllerPrivacy

The entity that determines the purposes and means of processing personal data.

Data ProcessorPrivacy

An entity that processes personal data on behalf of a data controller.

Data SubjectPrivacy

The identified or identifiable person whose personal data is being processed.

GDPRLegal

The General Data Protection Regulation — the EU's comprehensive data protection law, effective since May 2018.