---
id: "data-controller-and-processor"
kind: "glossary-term"
title: "data controller and data processor"
language: "en"
category: "Registration data and privacy"
updated: "2026-10-04T14:01:23Z"
canonical: "https://tldlog.com/glossary/data-controller-and-processor/"
translations:
  es: "https://tldlog.com/es/glosario/responsable-tratamiento-encargado-tratamiento/"
  de: "https://tldlog.com/de/glossar/verantwortlicher-auftragsverarbeiter/"
  fr: "https://tldlog.com/fr/glossaire/responsable-traitement-sous-traitant/"
  it: "https://tldlog.com/it/glossario/titolare-trattamento-responsabile-trattamento/"
  pt-BR: "https://tldlog.com/pt/glossario/controlador-operador-dados/"
  ru: "https://tldlog.com/ru/glossariy/kontroler-obrabotchik-dannykh/"
  zh-Hans: "https://tldlog.com/zh/cihui/shuju-kongzhizhe-shuju-chulizhe/"
---

# data controller and data processor

Under the GDPR, a controller decides why and how personal data is used, while a processor only handles data on the controller's behalf. In the WHOIS debate, a long dispute concerns which role ICANN, registries and registrars each hold, because the controller carries most of the legal responsibility.

## related terms

- [GDPR](https://tldlog.com/glossary/gdpr/)
- [data subject](https://tldlog.com/glossary/data-subject/)
- [Data Processing Specification](https://tldlog.com/glossary/data-processing-specification/)
- [data protection authority](https://tldlog.com/glossary/data-protection-authority/)
- [contracted parties](https://tldlog.com/glossary/contracted-parties/)