Laws · GDPR ·art-4-par-8 EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Full text
‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
How it connects
Cited by
- Guidelines 07/2020 on the concepts of controller and processor in the GDPR
- Guidelines 8/2020 on the targeting of social media users
- Guidelines 3/2018 on the territorial scope of the GDPR (Article 3)
- Guidelines 02/2025 on processing of personal data through blockchain technologies
- Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation
All 25
- Can the GPC standard eliminate consent banners in the EU?
- Generative AI and data protection
- LG Rostock: Pre-ticked cookie consent boxes invalid under Art 6(1)(a) GDPR
- Guidelines on processing of personal data through blockchain technologies
- Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub-processor(s)
- Opinion 15/2023 on the draft decision of the Dutch Supervisory Authority regarding the Brand Compliance certification criteria
- Guidelines 01/2020 on processing personal data in the context of connected vehicles and mobility related applications
- Philippe Latombe v European Commission
- Nacionalinis visuomenės sveikatos centras prie Sveikatos apsaugos ministerijos v Valstybinė duomenų apsaugos inspekcija
- AEPD: Ramona Films failed to comply with Article 58(2) order to provide processor
- DSB: No processor access violation under Art. 15 GDPR when controller deleted data
- AEPD: Canals City Council breached Art. 5(1)(f) GDPR by discarding exam papers unshredded
- AEPD: Continuous workplace audio recording violates GDPR data minimisation principle
- HDPA (Greece) - 15/2026
- AEPD: CaixaBank requested excessive inheritance documentation from heirs
- Cyprus court upholds €5,000 DPA fine on Pancyprian Judo Federation for Article 31 GDPR
- AEPD sanctions Vodafone España for inadequate Super WiFi processor agreement and oversight
- Guidelines 04/2026 on the application of the power to impose administrative fines in relation to other corrective powers under the GDPR
- IMY fines Miljödata SEK for Article 32 GDPR violation after ransomware breach of 2.2M
- AEPD (Spain) - ps-00287-2025
Related across sources
C-46/23 Budapest Főváros IV. Kerület Újpest Önkormányzat Polgármesteri Hivatala v Nemzeti Adatvédelmi és Információszabadság Hatóság In a preliminary ruling requested by the Budapest High Court, the Court of Justice interpreted whether Article 58(2)(d) and (g) of the GDPR permits a national supervisory… CJEU ·Fifth Chamber Mar 14, 2024 Right to be Forgotten Personal Data Right to Restriction
C-60/22 UZ v Bundesrepublik Deutschland In Case C-60/22, the CJEU (Fifth Chamber) ruled on a preliminary reference from the Verwaltungsgericht Wiesbaden concerning UZ, a third-country national, and the Bundesrepublik… CJEU ·Fifth Chamber May 4, 2023 Right to Restriction Right to be Forgotten Personal Data
Guidelines 07/2020 concepts of controller and processor in the GDPR Guidelines ·EDPB Jul 7, 2021 Controllers Processors IP Address
C-169/23 Nemzeti Adatvédelmi és Információszabadság Hatóság v UC In Case C-169/23, the Court of Justice of the European Union (Third Chamber) ruled on a preliminary reference from the Kúria (Hungary) concerning whether the Budapest Metropolitan… CJEU ·Third Chamber Nov 28, 2024 Personal Data Legitimate Interest Supervision
C-604/22 IAB Europe v Gegevensbeschermingsautoriteit In Case C-604/22, the Court of Justice of the European Union ruled on a preliminary reference from the Brussels Court of Appeal in proceedings between IAB Europe and the Belgian… CJEU ·Fourth Chamber Mar 7, 2024 IP Address Controllers Personal Data
C-272/19 VQ v Land Hessen In a preliminary ruling requested by the Verwaltungsgericht Wiesbaden in proceedings between VQ and Land Hessen, the CJEU addressed whether the GDPR applies to the processing of… CJEU ·Third Chamber Jul 9, 2020 Material scope (GDPR) Right of Access Personal Data