The activity of a processor includes the processing of personal data on behalf of a controller. The processor only acts in accordance with the instructions of the controller and must comply with data protection regulations. The processor is also obliged to keep a record of processing activities and to report data protection incidents to the controller without delay.
