!!! Overview [{$pagename}] is the [entity] that processes [data] for on behalf of the [Data Controller]. [{$pagename}] is any [agent] that accepts [data] as input and generates output [data], possibly generating some side effects. !! [{$pagename}] [General Data Protection Regulation] [{$pagename}] is the [Legal Person] that processes [Personal data] for on behalf of the [Data Controller]. [{$pagename}]'s [Responsibility] with the [Data Controller] [MUST] be specified in a [contract] or another [legal] act. For [example], the [contract] [MUST] indicate what happens to the [Personal data] once the [contract] is terminated. A typical activity of processors is offering [Information Technology] solutions, including [Cloud Data Store]. The data processor may only sub-[contract] a part of its task to another processor or appoint a joint processor when it has received prior written [Authorization] from the [Data Controller]. There are situations where an [entity] can be a [Data Controller], or a [Data Processor], or both. [{$pagename}], under Data Protection Directive and [GDPR], are completely [responsible] for "[lawful|Legal]' handling of [Personal data]. [GDPR] makes also make [{$pagename}] [accountable] [{$pagename}]s must: * have a [contract] with a [Data Controller] and abide by the terms. * keep an [Auditing] log of all processing activities * __NOT__ [delegate|delegation] processing duties to others without approval with the [Data Controller] Violations by [{$pagename}] can be fined up to 10M Euro ($11,603,700.00) or 2% of global revenue whichever is greater. [data] processing means any operation or set of operations which is performed on [personal data] or on sets of [personal data], whether or not by automated means, such as [collection|Data curation], recording, organisation, structuring, [storage|Data Store|DataStore], adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or [destruction|Data Disposal]; [{$pagename}], under [General Data Protection Regulation] definitions, is __NOT__ a [third-party] !! More Information There might be more information for this subject on one of the following: [{ReferringPagesPlugin before='*' after='\n' }] ---- * [#1] - [General_Data_Protection_Regulation|Wikipedia:General_Data_Protection_Regulation|target='_blank'] - based on information obtained 2016-07-10 * [#2] - [What is a data controller or a data processor?|https://ec.europa.eu/info/law/law-topic/data-protection/reform/rules-business-and-organisations/obligations/controller-processor/what-data-controller-or-data-processor_en|target='_blank'] - based on information obtained 2018-10-04-