Governance

Personal information processor (PIP)

Entity that processes personal data on behalf of a controller.

Definition

Any person or organization who processes personal information on behalf of a personal information controller, acting only on the controller’s documented instructions and subject to contractual and security obligations imposed by the controller.