Who holds resonponsibility for data security?

Data Controller

One of the data protection positions. A Data Controller is the individual who, alone or with others, decides on the objectives and means of the processing of personal data. This individual may be a person, a company, a public authority, an agency, or another entity. National or community laws may identify the controller or the precise requirements for the nomination of the controller where the aims and means of processing are governed by such laws or regulations.