Controller
Under UK GDPR, the organisation that decides why and how personal data is processed, and carries primary responsibility for compliance. Using an AI supplier does not transfer that responsibility to them.
Related terms
A statement agreed at the AI Safety Summit hosted by the UK at Bletchley Park on 1 and 2 November 2023, in which count…
Computer-generated worksA category in UK copyright law for works generated by computer with no human author, where the author is treated as th…
Council of Europe AI ConventionThe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law, the first legally…
Data (Use and Access) Act 2025A UK Act that received Royal Assent on 19 June 2025 and amends UK GDPR and related law, including the rules on automat…
Data Protection Act 2018The UK statute that sits alongside UK GDPR, adding exemptions, rules on law enforcement and intelligence processing, a…
Data protection by design and defaultThe UK GDPR requirement to build privacy into systems from the start and to process only the personal data needed by d…
Knowing the word is the easy part
A short assessment scores you across five skill areas and builds a path through 18 modules, skipping whatever you already know. Free, no card.
Find your level