What is the difference between a data controller and processor?

Read data processing definitions

Learn more

A data controller generally decides why and how personal data is processed. A data processor processes personal data on behalf of the controller and follows the controller's instructions.

The distinction matters because controllers and processors have different responsibilities. It also affects the terms that should appear in a data processing agreement, including security, sub-processors, audits and data deletion.

The exact role depends on the facts and the applicable data protection law.

This answer is general information, not legal advice.

Browse contract data FAQs

Get Started

Looking for more answers?

More Questions