Two or more controllers that jointly decide the purposes and means of processing.
Joint controllers together determine why and how personal data is processed, and must agree a transparent arrangement setting out who does what — especially who answers data-subject requests.
Individuals can exercise their rights against any of the joint controllers.
In the Regulation
Related terms
Need this applied to your business?
The articles and FAQs turn GDPR terms into working knowledge.