← Security+ glossary

Controller and processor

Under the GDPR, the controller decides on the purpose and means of processing personal data, while the processor processes the data solely on the controller's instructions. The controller bears the main responsibility for the lawfulness of the processing, while the processor acts within the given instructions.

All Security+ guides →