{"id":3799,"date":"2020-01-07T22:43:28","date_gmt":"2020-01-07T21:43:28","guid":{"rendered":"https:\/\/klauberg.legal\/?p=3799"},"modified":"2020-10-19T19:19:59","modified_gmt":"2020-10-19T17:19:59","slug":"why-is-it-important-to-determine-your-role-in-personal-data-processing-controller-or-processor-take-the-test","status":"publish","type":"post","link":"https:\/\/klauberg.legal\/de\/why-is-it-important-to-determine-your-role-in-personal-data-processing-controller-or-processor-take-the-test\/","title":{"rendered":"Why is it important to determine your role in personal data processing? Controller or processor? &#8211; take the TEST"},"content":{"rendered":"<div id=\"ember3509\" class=\"ember-view\">\n<div class=\"reader-article-content\" dir=\"ltr\">\n<p>The responsibilities of each company or person in the processing of personal data depend on whether they are the controller, the joint controller or the processor. Therefore, it is very important\u00a0to carefully evaluate\u00a0your or your company\u2019s role and responsibilities\u00a0with regard to\u00a0personal data processing activities\u00a0in order\u00a0to understand:<\/p>\n<ul>\n<li>responsibilities defined by General Data Protection Regulation (GDPR) and how to perform them;<\/li>\n<li>responsibilities towards individuals and supervisory authorities;<\/li>\n<li>possible fines related to non-compliance with GDPR;<\/li>\n<li>how to cooperate with other organizations in order to ensure a responsible processing of personal data and respect of the rights of individuals;<\/li>\n<li>what type of contract to conclude with another organisation or individual.<\/li>\n<\/ul>\n<p>It is important to remember that an organisation or person which processes personal data is not by its nature either a controller or a processor. Instead, one needs to consider the personal data and the processing activity that is taking place, and consider who is determining the purposes and means of that specific processing.<\/p>\n<p>Often companies or persons are unaware of their role in the processing of personal data. Even more often, they are deliberately negligent, in an attempt to avoid liability. Good news is that such attempts will be unsuccessful, as,\u00a0in the case of\u00a0a data breach, the controller and processor roles will\u00a0be determined\u00a0in accordance with\u00a0the GDPR, rather than the contractual agreement.<\/p>\n<p>Why do companies use such a careless approach? The answer is simple &#8211; the practice of applying the GDPR is not yet well-established &#8211; there are few court rulings and there is still a likelihood that\u00a0contract terms will be taken\u00a0into consideration when deciding the case.<\/p>\n<p>There is, however, another pitfall in this context\u00a0\u2013\u00a0by misidentifying the data processing roles initially, the parties may conclude a wrong form of contract and perform obligations that do not apply to them. When a controller defines itself as a processor, it consciously or unconsciously avoids the obligations set out in the GDPR.<\/p>\n<p>In other cases,\u00a0in order\u00a0to\u00a0be able to\u00a0decide matters unilaterally, as provided in GDPR,\u00a0company\u00a0may\u00a0convince a less knowledgeable\u00a0partner\u00a0that they\u00a0(i.e. the partner)\u00a0are the data\u00a0processor.\u00a0Consequently,\u00a0such\u00a0a &#8222;processor&#8220; would\u00a0carry\u00a0a liability that\u00a0it\u00a0would not have to\u00a0carry\u00a0if the company had, from the outset, devoted enough time, attention and knowledge\u00a0to correctly determine\u00a0its role.<\/p>\n<p>Therefore, the first step in implementing personal data protection is defining your role and\u00a0the roles\u00a0of your partners. If you\u00a0currently\u00a0lack the knowledge and information or\u00a0you\u00a0are not sure that you have made a correct assessment,\u00a0I suggest you use this\u00a0<a href=\"http:\/\/www.egdpr.lv\/shop-1\/params\/category\/0\/item\/1116308\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\"><strong>TEST<\/strong><\/a> to determine your role in the processing of personal data.<\/p>\n<\/div>\n<div dir=\"ltr\"><\/div>\n<\/div>\n<div id=\"ember3511\" class=\"ember-view\">\n<div class=\"reader-ugc-post-bar reader-ugc-post-bar--expanded\">\n<h4 class=\"mb2 t-sans t-16 t-black\">Published by<\/h4>\n<div class=\"display-flex justify-space-between\">\n<p>Marina Bri\u0161kena <a id=\"ember3522\" class=\"hoverable-link-text link-without-visited-state t-black t-14 ember-view\" href=\"https:\/\/www.linkedin.com\/in\/marina-bri%C5%A1kena\/\" data-control-name=\"read_profile\" target=\"_blank\" rel=\"noopener\"><span dir=\"ltr\">LinkedIn<\/span><\/a><\/p>\n<div id=\"ember3524\" class=\"reader-ugc-post-bar__headline t-black--light t-12 feed-shared-text-view white-space-pre-wrap break-words ember-view\">Independent Legal Professional \/ DPO (eGDPR.lv)<\/div>\n<\/div>\n<div class=\"pv2 t-14\">\n<div id=\"ember3534\" class=\"feed-shared-text-view white-space-pre-wrap break-words ember-view\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div id=\"ember3564\" class=\"reader-social-bar-v2 reader-social-bar-v2__sticky-container is-stuck ember-view\">\n<div id=\"ember3565\" class=\"social-details-social-activity ember-view\">\n<div id=\"ember3566\" class=\"ember-view\">\n<div id=\"ember3567\" class=\"ember-view\"><\/div>\n<\/div>\n<div class=\"reader-social-bar-v2__social-counts\">\n<div id=\"ember3568\" class=\"p0 feed-shared-social-actions feed-shared-social-action-bar social-detail-base-social-actions ember-view\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>The responsibilities of each company or person in the processing of personal data depend on whether they are the controller, the joint controller or the processor. Therefore, it is very [&hellip;]<\/p>\n","protected":false},"author":13,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"rank_math_lock_modified_date":false,"inline_featured_image":false,"footnotes":""},"categories":[41],"tags":[],"acf":[],"_links":{"self":[{"href":"https:\/\/klauberg.legal\/de\/wp-json\/wp\/v2\/posts\/3799"}],"collection":[{"href":"https:\/\/klauberg.legal\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/klauberg.legal\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/klauberg.legal\/de\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/klauberg.legal\/de\/wp-json\/wp\/v2\/comments?post=3799"}],"version-history":[{"count":0,"href":"https:\/\/klauberg.legal\/de\/wp-json\/wp\/v2\/posts\/3799\/revisions"}],"wp:attachment":[{"href":"https:\/\/klauberg.legal\/de\/wp-json\/wp\/v2\/media?parent=3799"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/klauberg.legal\/de\/wp-json\/wp\/v2\/categories?post=3799"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/klauberg.legal\/de\/wp-json\/wp\/v2\/tags?post=3799"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}