Question 1

Who does this affect?

Accepted Answer

The GDPR applies to organizations, controllers, and processors located within and outside the EU, who offer goods or services to EU data subjects. GDPR also applies to organizations, such as marketing organizations or those who supply or use data that monitor the behavior of EU subjects.

Question 2

What is the difference between a controller and a processor?

Accepted Answer

A controller determines the purposes, conditions, and means for the processing of personal data, while the processor processes the personal data on behalf of the controller.