Joint controllers
CIPP/E glossary · Last reviewed: · By Victor Humenhuk (CIPP/E certified)
Joint controllers - Two or more controllers jointly determining purposes and means; they must transparently allocate responsibilities and make the 'essence' of the arrangement available to data subjects.
In the CIPP/E body of knowledge, Joint controllers comes up under Ch 16.2 - OBA and the GDPR; Ch 17.2.2 - Controller vs processor; Ch 8.1.4 - Extra info duties.
Joint controllers in context
- [[Article 26]] requires joint controllers to ==allocate their respective compliance responsibilities== by an ==arrangement==, and to make its ==essence available to data subjects==. (Joint Controllership)
- OBA data normally counts as ==personal data== (online identifiers let users be 'singled out'), so the GDPR applies, and publishers, advertisers and networks may be ==joint controllers== each needing their own lawful basis. (Online behavioural advertising (OBA))
- After ==Wirtschaftsakademie==, advertisers may be ==joint controllers== even if they never receive the data. (Targeted online advertising: ecosystem and law)
Where Joint controllers is covered in the CIPP/E study notes
- Situations requiring additional information
- Online behavioural advertising (OBA)
- Cloud: controllership issues
- Module 3 · Controller vs processor
Related terms
- Right to object
- New purpose (further processing)
- OBA
- Cookie
- Profiling
- Single out
- Controller
- Processor
- Essential means
- Purposes and means
Test yourself on Joint controllers
Recognising a definition is not the same as applying it in an exam scenario. Work through the free CIPP/E practice questions, or read the full CIPP/E study guide - every study note is free.