This guidance will explain the difference between a data controller and a data processor, what their roles and responsibilities are and the governance issues that have to be addressed to ensure data protection compliance.
Please note: The following information has not been updated since the Data Protection Act 2018 became law. Although there may be some subtle differences between the guidance in this document and guidance reflecting the new law – we still consider the information useful to those in the media. This guidance will be updated soon to reflect the changes.