Processor

A person or organisation that processes digital personal data on behalf of a data fiduciary, acting under its instructions and subject to contractual and security obligations prescribed by the Act and subordinate rules.

A natural or legal person, authority, agency, or other body that processes personal data on behalf of the controller and under its instructions. Processors are subject to contractual and compliance obligations defined by the PDPL and implementing regulations, including security measures, sub-processing restrictions, and cooperation in breach notifications and audits.

A person or entity that processes personal data on behalf of the controller, acting only on documented instructions, and required to ensure confidentiality and appropriate technical and organizational security measures as set out by the controller and statute.

A person or entity that processes personal data on behalf of a controller pursuant to instructions and contracts, with obligations to implement technical and organisational measures and to notify controllers of security incidents.

A natural or legal person or body that processes personal data on behalf of a controller under their instruction and subject to contractual and statutory duties.

A natural or legal person who processes personal data on behalf of a controller under instruction and contract, subject to specific contractual safeguards and obligations concerning sub‑processing and security measures.

A natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller under specific contractual terms.

A natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller under instruction or contract, required to follow the controller's instructions and to implement appropriate technical and organisational security measures and cooperation duties set by the law.

A natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller and must act only on documented instructions, under contractual obligations set by the law and GDPR-aligned provisions.

A person or entity that processes personal data on behalf of a controller under instruction, subject to contractual and legal obligations in the Act regarding security, subcontracting, and accountability.

A natural or legal person, public or private, that performs processing activities on behalf of the Responsible for Treatment and under their instructions. Examples include technology providers (e.g., Herta Security) that operate the facial recognition software and must comply with contractual and legal obligations regarding security and lawful processing.