What Is a Data Processor?
- Use this page to tighten what is a data processor? with owners and dates.
- Connect narrative to systems: where data lives, who can export it, what breaks on delete.
- Add evidence habits (logs, tickets) so audits do not rely on memory.
- Bookmark official resources for statutory text; stay skeptical of unattributed claims.
- Use the compliance portal to chain the next guide when this section is done.
See also: Compliance portal · Official resources · Guides index
This usually matters when your team uses outside tools and vendors and needs to understand what role they are playing in the workflow.
Plain-English view
Think of processors in relation to who is actually deciding the purpose and means of data handling versus who is operating within a narrower role.
Statutory definition: Section 2(k) — "any person who processes personal data on behalf of a Data Fiduciary." Section 8(2) requires that engagement to sit under a valid contract, and a Data Fiduciary stays responsible for its processor's compliance (Section 8(1)) — using a processor does not transfer or dilute that responsibility.