Personal data · Legal glossary
Data controllerIn Arabic: جهة التحكم
Definition
The controller is the person who decides why personal data are processed and how. The controller may process the data itself or through a processor.
How it varies across the GCC
The name is not the same across the Gulf. Saudi Arabia’s Personal Data Protection Law calls this person جهة التحكم (article 1). The UAE’s Federal Decree-Law No. 45 of 2021 calls this person المتحكم (article 1). The terminology of Bahrain Law No. 30 of 2018 was not verified for this page.
The rules that apply to a specific matter depend on the state, any free zone involved and the current text of the law, so check the official source before relying on them.
Compare the GCC laws side by side in our data protection guideSources
Official texts for the points on this page. General information, not legal advice. An article number is cited only where it was verified.
- Saudi Personal Data Protection Law, art. 1https://laws.boe.gov.sa/BoeLaws/Laws/LawDetails/b7cfae89-828e-4994-b167-adaa00e37188/1
- UAE Federal Decree-Law No. 45 of 2021, art. 1https://uaelegislation.gov.ae/ar/legislations/1972