← Back to glossary
⚙️

Data Processor

Data Management

Security Audit Data Controller Standard Contractual Clauses (SCCs) Cloud Provider

Entity processing personal data on behalf of a controller under instructions.

Definition

A data processor performs processing for a controller and must follow documented instructions, implement appropriate security, and support the controller’s compliance duties.

In plain English Entity processing personal data on behalf of a controller under instructions.

Why this matters

Why it matters: Processor choice and contracts shape real privacy risk.

Example

Example: Hosting vendor acts as processor; contract defines retention, sub-processors, and breach notification.