Blog

Data controller or data processor?

Due to the Personal Data Regulation, it is important to clarify whether you are a data controller or a data processor.

Data Controller:
You and your company are responsible for compliance with the Personal Data regulation. You decide how personal data is processed.

A good rule of thumb is that the data controller is the one registered to exercise his rights under the Personal Data regulation.

Data Processor:
If you store and / or process personal data for others, you are categorized as a data processor. This means that you are not allowed to use the data for anything other than completing the task where you are a data controller.

There is a number of obligations that your organization needs to be compliant with when handling other people’s data. For instance you must have a written contract setting the framework for data processing - a data processing agreement - and you may only process data according to clear and documented instructions from the data controller.

 

Sign Up for the Newsletter

Invalid Input
Invalid Input
 

RISMA Systems A/S uses its own cookies and cookies from third parties to remember your settings, traffic metrics and to present you with targeted adverts. By continuing your browsing of this website, you consent to this use of cookies. If you do not want to accept the use of cookies, you will have to leave the website or block cookies in your browser. You may always withdraw your consent by blocking the use of cookies in your browser. Further information regarding the use of cookies, including how to block and delete cookies, can be found here, where you are also able to read more about our policy for processing of personal data.