Data processor
Also known as: processor
A data processor is any natural or legal person, public authority, agency, or other body that processes personal data on behalf of a data controller. Processors must act only on the controller's documented instructions and must implement appropriate security measures. The relationship between a controller and a processor must be set out in a written contract.
DPA reference
Data Protection Act 2020, s.2
Related terms in Key concepts
Anonymisation
Altering personal data so that individuals can no longer be identified, directly or indirectly.
Automated decision-making
Making decisions solely by automated means, without human involvement, that significantly affect individuals.
Beneficial ownership
The natural person who ultimately owns or controls a legal entity.
Biometric data
Unique physical or behavioural characteristics used to identify an individual, such as fingerprints.