The word ‘control’  in  UCD implies that the user plays an active part in the process of  transferring data from one party to another, and thus can stop the transfer by declining to play that part.  For example, an individual controls whether to take a bank note from their wallet and hand it over to a merchant. Similarly, using a PDS, a user will control whether to share data. Control is different to Consent, defined elsewhere.