Guidelines on the concepts of controller and processor in the GDPR

After considering the comments received during a public consultation, the EDPB adopted a final version of the guidelines on the concepts of controller and processor. The main objective is to clarify

·       the definitions of the functional and autonomous concepts of the (joint) controller and the processor,

·       the interaction between the different actors,

·       the distribution of responsibilities between these actors.

These guidelines replace the opinion of the "Article 29" working group on the concepts of controller and processor (WP169) and as such aim to answer questions relating to the practical application of the concepts under the realm of the GDPR.

Last update