Five things to know about the evolving concept of joint
controllership in data protection and what it means in
practice
"Joint controllership" is more common than many think.
Access is not a prerequisite for a joint controller of personal
data, nor is involvement in determining the means of processing;
people can be joint as well as independent controllers and
processors in relation to the same activity. But each data
processing activity needs to assessed closely – and, as
always, contract terms are crucial for complying with UK and EU
data protection laws and allocating risk and liability.
Those were some of the main observations and takeaways from the
opening webinar, given by Daisy Jones, Senior Associate in Osborne
Clarke's data team, of a new "Dipping into Data"
series, which explores the legal, regulatory and commercial
considerations around the use of data (whether personal data or
otherwise), including intellectual property rights, data
