Where does the responsibility lie with the Data Protection Act?

The responsibility under the Data Protection Act lies with the data controller, who determines the purposes and means of processing personal data, and the data processor, who processes data on behalf of the data controller. Both are responsible for ensuring compliance with the principles and requirements of the Act.