Anyone who publishes something on social media is normally to be regarded as data controller for the information. However, the rules do not apply to the processing of personal data that a person performs of a purely private nature. If personal data is published for a wider circle in social media, however, it is not to be regarded as processing of a purely private nature and the person who, for example, publishes pictures of people on social media becomes responsible for the personal data processed. In order to have the right to publish personal data, a legal basis for the processing is required.