All cards3 / 5
Card 3 of 5
Who is responsible for the data?
Three roles in UK GDPR. WHL projects almost always involve more than one organisation, so the lines matter.
- Controller. decides why and how data is used (e.g. London Councils, GLA, boroughs)
- Processor. uses data on behalf of the controller (suppliers, platforms, contractors)
- Joint controllers. two or more organisations decide together
Controller picks the destination. Processor follows the route. Joint controllers pick the route together.