Legal Due Diligence · glossary

Controller and processor

The two roles in data protection law. The controller decides why and how personal data is used, and the processor handles it on the controller's behalf, under a written contract. Solaris was the controller, and its analytics provider Parsec the processor. Report §8.1 · Chapter 10

Explained in Chapter 10, IP, IT and Data, of Legal Due Diligence.

How it comes up, in Chapter 10
Solaris holds personal data (information about identifiable people) on many customers. The GDPR, the EU's data protection law, gives everyone who handles such data one of two roles. The controller decides why and how the data is used. The processor handles it on the controller's behalf.
Read Chapter 10, IP, IT and Data →

Chapter 1 and this glossary are open to everyone; the whole edition is free to read with a free account until 31 January, and it stays open to an account opened by then.

Related terms

Where this term lives

This term is part of one complete fictional deal, with every document attached and a test after every chapter. Open Legal Due Diligence → · All terms A–Z →