A few blog posts ago, I asked the question of whether the Royal Mail was a Data Controller or a Data Processor. I think they are the latter; many disagreed, and in the main, argued that the Royal Mail are – in DP terms – Switzerland. They are not contractors, not controllers, they merely move […]
Data Protection has two types of organisations. The Data Controller is one with the responsibilities: they decide how personal data is processed, and so are subject to the eight Data Protection principles and all of the associated challenges, problems and heartaches. Even if they outsource an entire process like payroll or HR to a data […]
