A law firm will most likely be considered a controller when processing personal data from third parties as part of a representation of a client (e.g…