EDPB guidance on controller, joint-controller and processor roles under the GDPR.
Authority
EDPB
Reference
Guidelines 07/2020
Legal basis
Articles 4(7), 4(8), 26, 28 and 29 GDPR
Status
Final version
Published
7 July 2021
Source
Documents
Curation note
Included for v0.1 because the scanner maps vendors and subprocessors into controller/processor assumptions.
This page records the authoritative source for the EDPB controller/processor guideline. The curated GDPR L3 set is deliberately not a complete EDPB/WP29 corpus.
The guideline is used as source material for role classification, processor/subprocessor tables and counsel-review assumptions.
Last updated