Skip to main content

Data protection fee self assessment

5. Are you a data controller or a data processor?

What is a data controller?

Data controllers are the main decision-makers of what happens with personal information and give instructions to data processors. They have control over how and why personal information is collected, used, stored and destroyed.

What is a data processor? 

Data processors act on behalf of, and only on the instructions of, data controllers. 

Can we be both a controller and processor? 

Yes. You may be a processor for some of the personal information you collect, use, store and destroy - acting only on the instruction of a data controller. But, you may also handle personal information as a data controller eg you make the decisions about it. 

If you need to determine if your organisation is a data controller or a data processor, please read our guidance.