Controllers & Processors: Data Processing Contracts

Wishlist Share

About Course

Most organisations use suppliers that handle personal data for them, from payroll bureaux to cloud software. This course explains the difference between controllers and processors under UK GDPR, what Article 28 requires a processing contract to contain, and how to manage processors and sub-processors.

This course gives general information about UK data protection law and is not legal advice. ICO guidance is being updated after the Data (Use and Access) Act 2025; check ico.org.uk for the latest version.

What Will You Learn?

  • Tell controllers, processors and joint controllers apart
  • Check a processing contract against Article 28
  • Manage sub-processors and international transfers
  • Understand processors' own liabilities

Course Content

Course Lessons

  • Controller or processor?
  • What the contract must include
  • Managing processors in practice

Sources & Further Reading
The official guidance this course is based on.

Final Assessment

Student Ratings & Reviews

No Review Yet
No Review Yet

Want to receive push notifications for all major on-site activities?

✕