DSCI DCPLA Exam - Topic 1 Question 63 Discussion

Actual exam question for DSCI's DCPLA exam

Question #: 63
Topic #: 1

[All DCPLA Questions]

What is a Data Controller?

AEntity that collects personal data

BEntity that stores personal data

CEntity that determines the purpose and means for data processing

DEntity that shares personal data with third parties

Show Suggested Answer

Suggested Answer: C

As per the DSCI Privacy Framework and consistent with definitions in APEC and GDPR standards, a Data Controller (or Personal Information Controller) is defined as:

''A person or organization who controls the collection, holding, processing, or use of personal information. It includes one who instructs another to do so on its behalf.''

Thus, a data controller determines the ''purpose and means'' of processing, not merely performing or facilitating storage or sharing.

This is a central concept to ensuring accountability in privacy frameworks, as the controller is the primary entity responsible for compliance with data protection principles.

by Brande at Jan 05, 2026, 05:16 AM

Limited Time Offer

25%

Off

Get Premium DCPLA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Beata

1 day ago

Wait, I thought it was just about collecting data?

upvoted 0 times

...

Andrew

6 days ago

Totally agree, it's all about the purpose and means.

upvoted 0 times

...

Katlyn

12 days ago

A data controller decides how data is used!

upvoted 0 times

...

Florinda

17 days ago

C is the correct answer. Gotta love those data dictators!

upvoted 0 times

...

Audry

22 days ago

Data controllers? More like data overlords if you ask me!

upvoted 0 times

...

Cordell

27 days ago

Option C is the way to go. Can't have any confusion about who's running the show.

upvoted 0 times

...

Pete

2 months ago

I'm going with C. Gotta know who's in charge of the data, you know?

upvoted 0 times

...

Novella

2 months ago

Definitely C. The data controller calls the shots!

upvoted 0 times

...

Bok

2 months ago

C) Entity that determines the purpose and means for data processing

upvoted 0 times

...

Rebbecca

2 months ago

I’m confused because all the options seem related to data handling, but I think C is the most accurate based on what I studied.

upvoted 0 times

...

Francis

2 months ago

I feel like I’ve seen a similar question before, and I think it was about who decides how data is used, which sounds like C to me.

upvoted 0 times

...

Leeann

2 months ago

I remember something about data controllers, but I’m not entirely sure if it’s just about collecting or also about processing.

upvoted 0 times

...

Dominque

3 months ago

I think a Data Controller is the entity that determines the purpose and means for data processing, so I’m leaning towards option C.

upvoted 0 times

...

Lettie

3 months ago

I'm not totally sure about this one. I'll need to review my notes on data privacy and protection to make sure I have the right understanding of a data controller.

upvoted 0 times

...

Letha

3 months ago

I'm pretty confident that a data controller is the entity that collects personal data. That seems to be the most straightforward definition based on the options provided.

upvoted 0 times

...

Rory

3 months ago

Okay, I've got this. A data controller is the entity that decides how personal data will be used and processed. That's option C, so that's my answer.

upvoted 0 times

...

Candida

3 months ago

Hmm, this one has me a bit confused. I'll need to think through the different options carefully to make sure I understand what a data controller really is.

upvoted 0 times

...

Ulysses

3 months ago

I think the key here is to focus on the entity that determines the purpose and means for data processing. That sounds like the right definition of a data controller.

upvoted 0 times

...