Public bodies are expected to comply with the provisions of the Data Protection Act, 2019. The Act defines a data controller as a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purpose and means of