Data Processor

A data processor is a person or organization that processes personal data on behalf of a data controller.

The processor does not generally determine the main purpose of the processing. Instead, it performs processing according to the controller's instructions.

For example, a cloud service provider storing customer records for another company may act as a processor.

Processors have their own responsibilities under privacy laws, including security, confidentiality, subprocessor management, recordkeeping, and compliance with the controller's documented instructions.