But the wider point of note is that neither needs to have complete control over data processing activities to be deemed a data controller from a legal point of view. (techcrunch.com)
She has experience working with clients prepare for the General Data Protection Regulation, including audits of data processing activities and diligence of vendor agreements. (morganlewis.com)
The reality seems to be that some poorly worded descriptions of quite normal data processing activities were made public: Yes, it is perfectly normal to only select the part of a data set which matches your expectations. (blog.environmentalresearchweb.org)