The 'Controller' is the entity that determines the purposes and means of the processing of personal data. In other words, they make the high-level decisions about data processing activities. On the other hand, a 'Processor' is the entity that processes personal data on behalf of the controller. Therefore, it is the controller that has the authority over the purposes and means of processing, not the processor, compliance officer, or security administrator.
Learn More
AI Generated Content may display inaccurate information, always double-check anything important.
What specific responsibilities does a Data Controller have?
What is the role of a Data Processor compared to a Data Controller?
Can you explain what data protection regulations are relevant to Controllers?