What is the consequence if a processor makes an independent decision regarding the purposes and means of processing it carries out on behalf of a controller?

What is the consequence if a processor makes an independent decision regarding the purposes and means of processing it carries out on behalf of a controller?
A . The controller will be liable to pay an administrative fine
B . The processor will be liable to pay compensation to affected data subjects
C . The processor will be considered to be a controller in respect of the processing concerned
D . The controller will be required to demonstrate that the unauthorized processing negatively affected one or more of the parties involved

View Answer

Answer: C

Explanation:

If a processor makes an independent decision regarding the purposes and means of processing it carries out on behalf of a controller, the consequence is:

C. The processor will be considered to be a controller in respect of the processing concerned.

According to the GDPR, if a processor starts to determine the purposes and means of the processing, it steps out of its role as a processor and takes on the responsibilities of a controller for that particular processing activity.