“Each business will need to stipulate who their data controller is and what the individual controller’s responsibility is to the company or organisation.  Most business owners will appoint themselves the role and take responsibility for the management of personal data within the organisation.”