Under the Data Privacy Act of 2012 (RA 10173), the person or organisation that controls the collection, holding, processing or use of personal information is called the:

The correct answer is C. Personal information controller

The personal information controller decides what data to collect and how to use it. A processor handles the data on the controller's behalf, and the data subject is the person whose information is processed.