• Get Everything You Need to Secure a Training Contract
    Now half the price. Join TCLA Premium for £30/month and get step-by-step application support, daily commercial awareness practice, and 700+ successful examples of past applications and interview experiences. Plus so much more.
    Join Premium →
  • Ace Your Vacation Scheme Applications with Reed Smith
    10 Nov 2025 6:00 pm – 7:00 pm (UK) Zoom (registration required)
    Join Reed Smith for this practical session on how to write a strong vacation scheme application ahead of key deadlines. Understand what recruiters look for and how to get past the application review stage.
    Register on Zoom →
  • Write Winning Vacation Scheme Applications with Osborne Clarke
    11 Nov 2025 6:00 pm – 7:00 pm (UK) Zoom (registration required)
    Hear from Recruitment Advisor Patrick Fermin Ryan at Osborne Clarke on how to write a successful vacation scheme application. Gain expert advice on what makes applications stand out and how to approach yours with confidence.
    Register on Zoom →

Confusion over GDPR controller vs processor

AnnieMcJohns

New Member
Jun 7, 2020
1
0
Say company A hires company B to develop a piece of software and store all data associated with this software. Is company B a controller or processor? Or is company B a processor and depending on how it uses the stored data can be a controller as well?
 

c1070

Esteemed Member
Mar 4, 2020
75
192
Say company A hires company B to develop a piece of software and store all data associated with this software. Is company B a controller or processor? Or is company B a processor and depending on how it uses the stored data can be a controller as well?
From my understanding, as long as company B is using the data solely as instructed by company A, then it will be a processor. If company B does anything with the data beyond what it has been instructed to by company A, eg using the personal data collected for marketing of its own products, then it becomes a controller!
Fieldfisher have a useful YouTube series on data protection law:
 
  • Like
Reactions: Alice G and gg999

About Us

The Corporate Law Academy (TCLA) was founded in 2018 because we wanted to improve the legal journey. We wanted more transparency and better training. We wanted to form a community of aspiring lawyers who care about becoming the best version of themselves.

Newsletter

Discover the most relevant business news, access our law firm analysis, and receive our best advice for aspiring lawyers.