Responsible for personal data according to the GDPR
It is important that companies responsible for personal data according to the GDPR process personal data belonging to EU citizens correctly. The GDPR has provisions on the rights and special obligations of those responsible for personal data according to the GDPR. Both natural and legal persons can process personal data, for instance.
Responsible for personal data according to the GDPR
All processing of personal data, which takes place wholly or partly by automatic means (eg digitally), or if the data is included in a register, must take place in accordance with the GDPR. The GDPR stands for the General Data Protection Regulation. The person who processes personal data in this way can be a personal data controller or a personal data processor. Below is more information about these different roles.
Personal Data Controller
A personal data controller is the party that decides how the processing of personal data is to take place. Also, for what purposes personal data is to be processed and how the processing shall be made. The Controller has both rights and obligations under the GDPR.
It is usually not the manager of a workplace, an employee or any other physical person who is the Personal Data Controller. Normally, it is the company as such that is “Controller”. This applies if it is the company that determines why the personal data should be processed and for what purpose.
Personal Data Processor
Anyone who processes personal data on behalf of a personal data controller, is called a personal data processor. Also, the processing is made in accordance with the Controllers instructions.
For example, it is common for a company to be the Controller, which hires an accounting consultant to handle the company’s accounting. In such cases, the accounting consultant becomes a personal data processor to the company. Because the company will share personal data to the consultant. Thereafter, the personal data will be processed by the consultant, on behalf of the company.
News about GDPR and reviews from supervisory authorities
In addition to this information, you can also read our GDPR summary. And also about various news about the GDPR on this website. For example, audits carried out by Supervisory Authorities and sanction fees that they distribute. By learning from mistakes from others, it is possible to avoid making similar mistakes yourself. In addition, you can find information that is important and good to know as an entrepreneur as well as guides.
Summary of the GDPR for Companies, Entrepreneurs and Businesses
There is a lot of information about the GDPR that is important for companies, entrepreneurs and businesses to know about. We have therefore written a GDPR Summary and mention various key elements. Therefore, we are able to provide an overview of the GDPR, what it means and what companies must do to comply with the EU regulation.