Loading content...
Frequently Asked Questions
Got questions? We've got answers. Find quick solutions to common queries below.
If you decide the purpose and means of processing, you're a controller. If you only process data under another's instructions, you're a processor.
Yes. Many companies act as controllers for employee data and as processors when handling client data.
It must specify scope, security, retention, sub-processing rules, and deletion/return clauses — as required by Article 28 GDPR.
Both may be liable. The controller is accountable for choosing compliant processors, and processors are responsible for implementing adequate security.
Yes. GDPR applies to all entities, regardless of size, that process personal data of EU residents.