Party that has legal control over data to authorize data processing of the data by other parties