Both "data controllers" and "
data processors" have obligations under the GDPR, and data subjects can bring actions directly against either or both of those parties.
We should not forget the smaller data controllers like your neighbourhood garbage collecting company or security agency that possess private information about you.DATA PROCESSORSThe second key actors are
data processors.
This documentation must be available for viewing by the parties concerned (presumably, including data subjects), as well as the Authority, any
data processors, and the data controller itself.
Data processors (who process personal data on behalf of a data controller) also have new obligations under the GDPR that will need to be adhered to.
For example a retailer that hires a human resources company to handle payroll and other functions is the data controller, while the human resources company is the
data processor.
Article 28 in the GDPR says that data controllers shall only use
data processors with sufficient policies and procedures to fulfill the GDPR's privacy rights where data about them is stored.
For instance, if a company sells widgets to consumers and uses an email automation company to email customers on its behalf and track their engagement activity data, the widget company is the data controller, and the email automation company is the
data processor. "Generally speaking, the GDPR treats the data controller as the principal party for responsibilities such as collecting consent, managing consent-revoking, enabling right to access, etc.
* Post execution, the app monitors contractual commitments and tracks
data processor obligations to ensure the highest level of compliance, enabling data controllers and processors to demonstrate the strength and efficacy of their approach.
So they recruit sexy
data processor Frankie (Emma Rigby) and head to Miami where they plan a diamond heist that involves impersonating a billionaire sultan.
Jo Smith, a 35-year-old
data processor from Allesley, Coventry, will set o for Vietnam and Cambodia in February 2015 to raise money for Care International UK.
* Science
Data Processor (SDP) The Science
Data Processor (SDP) consortium will focus on the design of the computing hardware platforms, software, and algorithms needed to process science data from the correlator or non-imaging processor into science data products.