Article 4(7). Controller

Controllers are key actors in the operationalisation of data protection law as they are the primary bearers of the obligations set by such law towards data subjects. Thus, definition of the criteria for attaining the role of controller is essential for understanding the law’s application. As detailed below, the tendency under EU data protection law is to apply these criteria in an expansive and flexible way, thus rendering the threshold for attaining controller status quite low.