Module 3 - Controllers and Processors

Question 1

List the key personal data processing roles

Answer 1

Data Subject
Data Controller
Data Processor
Supervisory Authority

Question 2

What do Data controllers do?

Answer 2

They decide what data will be collected and what it will be used for.
Under GDPR, controllers have a greater responsibility

Question 3

What does a data processor do?

Answer 3

Processes data on behalf of the data controller, they can only follow instructions of the data controller and cannot decide on data.

Question 4

True or False: A data controller may be a natural person or a legal entity, while a data processor must be a legal entity.

Answer 4

False, they are separate. A data subject can be a natural person and not a legal entity.

Question 5

True or False: A contract protects a processor from being held to the same legal obligations as the controller

Answer 5

False

Question 6

True or False: A processor may decide where and how to process personal data

Answer 6

False, they need to follow the data controllers instructions

Question 7

True or False: When personal data is being processed, there is always a data controller.

Answer 7

True

Question 8

Which article in GDPR refers to the role of the Data Controller?

Answer 8

Article 4(7): alone or jointly with others, determinces the purposes and means of processing personal data.

Question 9

Which article defines the role of the data processor?

Answer 9

Article 4(8) - processes personal data on behalf of the controller