A data controller is an individual or organization that determines the purposes and means of processing personal data. In simpler terms, a data controller is responsible for deciding why and how personal data is collected and processed.