Company A collects and stores information from people X & Y on behalf of company B. Which of the following statements are true?
A is the data controller since it collects data directly from X & Y
B is the data controller while A is the sub processor as B has outsourced the data collection and processing to A
B is the data controller that uses A as data processor to collect and process data of data subjects X and Y
Both A & B are data controllers since both need to maintain highest principles of data protection
Submit