Take the ISO 27001 course exam and get the
EU GDPR course exam for free
LIMITED-TIME OFFER – ENDS MARCH 30, 2023

Expert Advice Community

Guest

Controller and Processor

  Quote
Guest
Dana Created:   Jan 22, 2023 Last commented:   Jan 24, 2023

Controller and Processor

If a company provide chatbot software to its clients and its clients need to collect EU data, is this company considered a controller or processor 

 

Assign topic to the user

EU GDPR DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

EU GDPR DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Tudor Galos Jan 24, 2023

Usually, a chatbot software provider should act as a Data Processor, but it depends on the level of the autonomy it has in the way it establishes the purposes and means of processing. According to European Data Protection Board’s Guidelines 07/2020 on the concepts of controller and processor in the GDPR, “the role of a processor does not stem from the nature of an entity that is processing data but from its concrete activities in a specific context. The nature of the service will determine whether the processing activity amounts to the processing of personal data on behalf of the controller within the meaning of the GDPR”. If the chatbot software provider has autonomy in the way it is processing personal data (for eg it decides to analyze the content of the conversations to extract key information), it is a data controllers. If it can define a framework in which it can operate by obeying clear personal data processing instructions given in the service contract and in the data processing agreement, it can act as Data Processors.  

Please consult these links as well:

Tudor Galos
Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Jan 22, 2023

Jan 24, 2023

Suggested Topics