Controllers and processors
-
Due to the Data (Use and Access) Act coming into law on 19 June 2025, this guidance is under review and may be subject to change. The Plans for new and updated guidance page will tell you about which guidance will be updated and when this will happen.
The guidance on this page is suitable for large businesses in the public, private and third sectors. Small businesses should use the resources on our small business web hub.
Brief guidance
Controllers and processors: a guide
The definitions of 'controllers' and 'processors', how to determine if you are a controller or processor and what the roles are.
Detailed guidance
Controllers and processors
More detailed guidance on controllers and processors, including how to apply the roles in practice, your responsibilities under each role and joint controllers.
Resources
Controllers self assessment
Assess your high level compliance with data protection legislation, as a data controller.
Processors self assessment
Assess your high level compliance with data protection legislation, as a data processor.