The crux of the debate is the definition of controller vs. processor. GDPR defines the controller as the entity that determines how personal data is processed. It defines the processor as the provider ...

whereas a data processor is responsible for processing data on behalf of the controller. In Real Business’s GDPR Doctors series, legal and tech experts explain all company bosses need to know ahead of ...

The GDPR establishes the general obligations of data controllers and of those processing personal data on their behalf (processors). These include the obligation to implement appropriate security ...

GDPR applies to ‘controllers’ and ‘processors.’ A controller determines the purposes and means of processing personal data. In other words, the controller is the business that is selling a good or ...

Data controllers must always have a legal basis to process personal data lawfully in Europe. Article 6(1)(f) of the GDPR is one of the six legal bases for the lawful processing of personal data ...

IAPP Research and Insights Director Joe Jones writes about the first proposed reforms of the EU General Data Protection ...

The European Union's General Data Protection Regulation ... provide the same types of protections as the GDPR. Clause 11(1) of the controller-to-processor SCC provides that in the event the ...

The GDPR defines several roles that are responsible for ensuring compliance: data controller, data processor, and the data protection officer (DPO). The data controller defines how personal data ...

Under the GDPR, for personal data processing to be lawful the data controller needs a valid legal basis — which must be transparently communicated. So obfuscation is not a good compliance strategy.

The proposed law also offers rights similar to GDPR — rights to access ... a person to whom the data relates (data subject) to require the data processor/ controller to rectify personal data ...

The GDPR requires controllers processing personal data in an adtech context to: The GDPR requires processors in an adtech context to: The GDPR does not apply to anonymized data, but the threshold ...