Data Controller

An entity that collects PII and sets the purposes and means of processing.

As the Controller is setting the instructions, they hold the highest responsibility in adhering to data protection laws.