DATA CONTROLLER AND DATA PROCESSOR
DATA CONTROLLER
This is a natural person, legal person or public body which alone or jointly with others determines the purpose and means of processing of personal data; and where the purpose and means of processing is determined by law, Data Controller is the natural person, legal person or public body designated as such by that law and it includes his representative
EXAMPLE OF DATA CONTROLLER: At the health facility a doctor collect patient personal information, will be the data controller for the personal data processed in connection with this notification system because it is in control of the purposes and means of the data processing. Also, when businesses use digital platform such as social media or google workspace for internal communication and collaboration, that business family will be data controller and that digital platform is the data processor.
DATA PROCESSOR
This is a natural person, legal person or public body which processes personal data for and on behalf of the controller and under the data controller instruction, except for the persons who, under the direct authority of the controller, are authorized to process the data and it includes his representative. A data processor collect data from controller with different purpose such as for conducting commercial or non-commercial activities, education or research, and implementing various IT processes.
EXAMPLE OF DATA PROCESSOR: A software company delivering Marketing and Advertising Software -MAS to customers. If the customers of the Marketing and Advertising company add personal data from data collector/controller, then the Marketing and Advertising Company would then be a data processor.
ROLES AND RESPONSIBILITIES OF DATA CONTROLLERS AND DATA PROCESSORS
1: The data controller in essence
2: Oversees how data is used
3: Controls and supervises the duties of the data processor, and
4: Ensures that data is used,
5: Stored, and
6: Processed by the guidelines of the Commission.
They also oversee the process from obtaining data consent to enabling data usage for the required process.
