Data processor
The person or organisation that processes personal data on behalf of the data controller, under the authority and instructions it gives.
- 01
Why it matters
Hosting, e-mail, accounting, shipping and software service providers are often processors. The data controller should sign a written contract with them setting out obligations, security measures and sub-processors. A processor cannot use the data for its own purposes beyond the instructions.
- 02
Example
An agency hosts and manages a client's online shop and can access order data. The agency is a processor; its contract with the client states that the data will be used only for the service and deleted when the contract ends.
- 03
Common mistake
Signing a contract with a provider that covers only price and service terms. If data processing terms are not written down, it is unclear who is responsible for what when a breach happens.
- 04
Related terms
Related services and guides
Let's talk about your project.
Tell us what you need; we will define the scope together.