Skip to content
compliancebase

Processor

A party that processes personal data on documented instructions from a controller.

In practice

Limit processing to instructions, execute Article 28 terms, assist with rights and incidents, and control subprocessors.

Common confusion

Calling a vendor a processor in a contract does not override processing it performs for its own independent purposes.

Related controls

Framework versions referenced in this page:

Last verified: August 2026 · Primary sources linked above