Two or more controllers that jointly decide the purposes and means of processing.
Joint controllers together determine why and how personal data is processed, and must agree a transparent arrangement setting out who does what — especially who answers data-subject requests.
Individuals can exercise their rights against any of the joint controllers.
In the Regulation
Related terms
Need this applied to your business?
Our data-protection lawyers turn GDPR terms into a working plan.