A data controller is the person, party or business who decides what personal data to collect, and for what purposes.