Data processor
Also known as: processor
A data processor is any natural or legal person, public authority, agency, or other body that processes personal data on behalf of a data controller. Processors must act only on the controller's documented instructions and must implement appropriate security measures. The relationship between a controller and a processor must be set out in a written contract.
DPA reference
Data Protection Act 2020,
Related terms in Key concepts
Anonymisation
Altering personal data so that individuals can no longer be identified, directly or indirectly.
Automated decision-making
Making decisions solely by automated means, without human involvement, that significantly affect individuals.
Beneficial ownership
The natural person who ultimately owns or controls a legal entity.
Biometric data
Unique physical or behavioural characteristics used to identify an individual, such as fingerprints.