Do you know what the difference is, between a data controller and a data processor? It is an important distinction for anyone handling personal data.

A data controller is the individual, organisation, or entity that makes the decisions about why and how personal data is used. They are the ones who determine how data is collected, stored, and shared. Crucially, they are accountable for ensuring compliance with the UK GDPR.

In contrast, a data processor acts only on the controller's instructions. They do not have the same decision-making power.

Understanding this distinction is vital because controllers have more extensive responsibilities under the UK GDPR.

Have a look at the CSRB FAQ page for a more detailed look into this topic and other key data protection concepts.

#CSRB #dataprotection #dataprivacy #testimonial #Compliance #DataController #FAQ