thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Foundational

Data Processor

Entity that processes personal data on behalf of and under the instructions of a controller.

Definition

Processors must follow documented instructions, ensure staff confidentiality, implement security, assist the controller with rights and DPIAs, engage sub-processors only with authorization, delete or return data at end of service, and notify the controller of breaches without undue delay. A processor that determines purposes becomes a controller. CCPA uses the terms service provider and contractor.

Example

A cloud email platform processing a company's employee emails acts as processor.

Exam tip

Processors notify the controller, not the supervisory authority, of breaches.

Don't confuse it with

Related terms