Roles & Responsibilities (DPO, Data Controller, Data Processor)

Confused about GDPR jargon? No problem! Our glossary breaks down all the key terms and definitions you need to understand the language of data privacy and compliance. This glossary will grow as we continue to add new terms and explanations, making it an essential reference for everyone.

Controller-Processor Agreement

A legally required contract outlining responsibilities between a data controller and processor (Article 28(3)).

Data Controller

The entity that determines the purposes and means of processing personal data (Article 4(7)).

Data Processor

An entity that processes personal data on behalf of the data controller (Article 4(8)).

Data Protection Officer (DPO)

A professional appointed to oversee GDPR compliance and advise organizations on data protection (Articles 37–39).