Before the GDPR enters into force on 25 May 2018, companies
processing personal data will have to reassess their approach to
personal data processing. Under the current state of the law, a
company acting as a personal data processor that has been found
liable for unlawful personal data processing would be liable for a
breach of contract. With the GDPR in place, this would no longer be
the case, as it will impose legal
obligations directly on such data
processors. Fines for noncompliance may reach up to 4% of the
annual turnover for the preceding year or EUR 20 million, whichever
is higher.
What is a processor?
Processor is defined as a natural or legal person, public
authority, agency or other body which processes personal
data on behalf of the controller. The most
common examples of processors are the outsourced service providers
(accounting, payroll, marketing, receivables collection, cloud
servers etc.). The most important characteristic of a processor is
that
