Zansa › Answers › Privacy, security and ownership
What is the difference between a data controller and a data processor?
A controller decides why and how personal data is processed, while a processor handles it on the controller's behalf and on its instructions. The same roles exist under POPIA as responsible party and operator. The controller carries the main accountability. This is general information, not legal advice.
A retailer deciding to analyse its customer purchases is the controller. The analytics provider doing the work under its instructions is the processor.
Roles depend on facts, not labels. A provider that starts using the data for its own purposes may become a controller as well. That is why a written agreement should state who decides what. Rules differ by country and sector, so check how this applies to you with a qualified adviser.
Want this applied to your business? Zansa builds dashboards and forecasts for small and mid-sized companies worldwide. Start with a free intro call.
Book a call