Question

A retail company collects customer purchase data and decides how and why it will be used for marketing analytics. It contracts a cloud analytics vendor to run the computations strictly according to the retailer's documented instructions. The vendor's operations team also manages the day-to-day storage, backups, and access controls for the hosted datasets. Under a privacy framework such as GDPR, how should the retailer and the vendor's operations team be classified?

Accepted Answer

The retailer is the data controller; the vendor is the data processor

Answer

The retailer is the data processor; the vendor is the data controller

Answer

Both the retailer and the vendor are joint data controllers

Answer

The retailer is the data owner; the vendor is the data controller