Data Processor
An entity that processes personal data on behalf of a data controller, bound by a data processing agreement.
What Data Processor means
A data processor is an entity that processes personal data on behalf of and under the instructions of a data controller. In the advertising ecosystem, various entities act as processors — marketing agencies handling client data, analytics providers processing user data, and in some scenarios, ad platforms themselves. GDPR requires a formal Data Processing Agreement (DPA) between controllers and processors, specifying data handling obligations, security requirements, sub-processor management, and breach notification procedures. Processors must only process data according to controller instructions, implement appropriate security measures, assist with data subject rights requests, and maintain records of processing activities. Misclassifying controller-processor relationships is a common compliance failure.
Related terms
Data Controller
The entity that determines the purposes and means of processing personal data, bearing primary responsibility under GDPR.
GDPR
The General Data Protection Regulation — the EU's comprehensive data protection law governing how personal data is collected, processed, and stored.
Data Processing Agreement
A legally binding contract between a data controller and data processor that governs how personal data is handled.
Privacy Policy
A legally required document disclosing how an organization collects, uses, shares, and protects personal data.