A GDPR (General Data Protection Regulation) data controller is an individual or legal entity that’s responsible for determining the purposes and means of processing data collected from individuals (also known as targets).