A personal data controller is a legal or natural person, state authority or other body that maintains a collection of personal data, i.e. that independently or with others determines the purposes and method of personal data processing (Article 2 paragraph 1 point 5 of the Law on the Protection of personal data). When the purposes and method of processing are determined by law or another regulation, the same law or regulation determines the controller or the special criteria for its determination.