{"id":189599,"date":"2024-08-02T15:56:59","date_gmt":"2024-08-02T14:56:59","guid":{"rendered":"https:\/\/legalvision.co.uk\/?p=189599"},"modified":"2024-08-02T15:57:01","modified_gmt":"2024-08-02T14:57:01","slug":"business-both-data-controller-processor","status":"publish","type":"post","link":"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/","title":{"rendered":"What Do I Need to Do If My Business is Both a Data Controller and Processor?"},"content":{"rendered":"\n<p>If your business acts as both a data controller and a processor, you must understand and comply with various responsibilities under UK data protection law. Handling these distinct roles involves a range of obligations that you must not neglect, failing which you could face significant penalties. This article explores key data protection law considerations if your business is a controller and a processor.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What is the Distinction Between a Data Controller and a Data Processor?<\/h2>\n\n\n\n<p>UK data protection law is governed by the <a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/how-does-gdpr-affect-my-business\/\">UK GDPR<\/a> and the Data Protection Act 2018, which set out several principles and rules regarding how a business can process personal data. These laws are intended to protect individuals&#8217; rights.<\/p>\n\n\n\n<p>The law distinguishes between two key roles:&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">A Data Controller<\/h3>\n\n\n\n<p>As a <a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/data-controller\/\">data controller<\/a>, your business determines the purposes and means of processing personal data.&nbsp;<\/p>\n\n\n\n<p>You are primarily responsible for ensuring data processing complies with the UK GDPR.&nbsp;<\/p>\n\n\n\n<p>This means you must take a range of measures to protect personal data.  This means you should manage data subject rights, and maintain transparency by providing privacy information to individuals. You will also likely need to register with the <a href=\"https:\/\/ico.org.uk\/\">UK ICO<\/a> and pay the data protection fee.  Your business should also determine the lawful basis for processing personal data, and keep records of processing activities.\u00a0<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">A Data Processor<\/h3>\n\n\n\n<p>As a data processor, you handle personal data on behalf of the controller.&nbsp;<\/p>\n\n\n\n<p>You must follow the controller&#8217;s instructions and implement appropriate technical and organisational measures to ensure data security and compliance. Your role includes assisting the controller in fulfilling data subject rights and notifying the controller of any breaches without delay. You must follow the rules the controller sets but also have a range of responsibilities that are in your own right.&nbsp;<\/p>\n\n\n\n<p>Other obligations typically include that you must:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>process personal data only according to the controller&#8217;s instructions, respecting the controller&#8217;s decisions about data use;\u00a0<\/li>\n\n\n\n<li>protect the personal data you process with strong technical and organisational measures, including data encryption and regular security checks; and<\/li>\n\n\n\n<li>document your processing activities to provide transparency and accountability, unless certain exceptions apply.\u00a0<\/li>\n<\/ul>\n\n\n\n<p>Each role presents different types of obligations. Some responsibilities are unique, whereas others will overlap. For instance, certain controllers or processors businesses will need a Data Protection Officer.&nbsp; This can be difficult for a business to navigate and manage.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Can You Be Both a Controller and Processor?<\/h2>\n\n\n\n<p>Yes, you can. The ICO&#8217;s guidance confirms this; however, it notes that you cannot be a controller and a processor for the same processing activity. You may process the same personal data in different capacities if the purposes differ. For instance, you might process personal data as a processor on behalf of a controller while also processing it separately for your own purposes.<\/p>\n\n\n    <div class=\"my-7 lg:my-10 border-y-2 border-gray-100 py-7 lg:py-10 flex flex-col sm:flex-row items-start gap-10\">\n                    <img decoding=\"async\" class=\"w-52 mx-auto my-0! rounded\" src=\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2023\/07\/04001038\/uk-gdpr-factsheet.jpg\" alt=\"Front page of publication\"\n                 loading=\"lazy\" width=\"208\" height=\"298\">\n                <section>\n            <div class=\"text-2xl font-bold\">GDPR Essentials Factsheet<\/div>\n            <div class=\"body-text\">\n                <p>This factsheet sets out how your business can become GDPR compliant.<\/p>\n            <\/div>\n            \n\n<a href=\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2023\/07\/04001020\/LegalVision-UK-GDPR-Factsheet.pdf\" class=\" block px-5 py-3.5 max-w-fit bg-orange button__hover transition rounded text-white font-bold text-lg no-underline uppercase leading-tight text-center\" target=\"\" rel=\"\">Download Now<\/a>        <\/section>\n    <\/div>\n\n\n\n\n<p>The ICO notes that as a dual-role entity, you must ensure your systems clearly distinguish between data processed as a controller and data processed as a processor. This distinction allows for applying appropriate processes and measures for each role.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Example<\/h3>\n\n\n\n<p>Let us explore a practical example of where a business could be both a controller and a processor:<\/p>\n\n\n\n<p>If your business is a service supplier, you may have a dual role as a data controller and data processor.&nbsp;<\/p>\n\n\n\n<p>For example, you will likely collect and control data related to your staff, such as employment details, performance records, and personal information. As such, you will act as a data controller since you control the processing of this information and decide how such information is used.&nbsp;<\/p>\n\n\n\n<p>At the same time, you act as a service supplier for clients, holding and processing their data on their behalf, following their instructions. In this scenario, you can only use client data to deliver your services for limited purposes &#8211; as you are likely a processor.&nbsp;<\/p>\n\n\n\n<p>In this scenario, you must navigate the complexities of the UK GDPR, ensuring compliance in both roles. As a data controller, you determine how to process your staff&#8217;s data. You need to implement the necessary measures to protect this data and manage data subject rights.&nbsp;<\/p>\n\n\n\n<div  class=\"box box--icon box--info\">\n    <p>As a data processor, you must strictly follow your clients&#8217; instructions regarding their data, ensure robust security measures, and assist in fulfilling data subject requests.<\/p>\n<\/div>\n\n\n\n<p>This dual role presents a range of challenges, which needs careful planning to meet the requirements of the UK GDPR and maintain trust with your staff and clients.&nbsp;<\/p>\n\n\n\n<p>You should note that there are also circumstances in which parties can be <a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/joint-controller\/#:~:text=Firstly%2C%20you%20can%20share%20personal,data%20for%20a%20joint%20purpose.\">joint controllers<\/a>, which can be an additional consideration for businesses which gives rise to various other compliance obligations and challenges.&nbsp;<\/p>\n\n\n\n\n<a href=\"#content-next\"\n   class=\"block p-4 mt-10 text-xl font-bold text-center text-white no-underline bg-gray-800 rounded-t-xl\">\n    Continue reading this article below the form\n    <i class=\"text-xl fa-regular fa-arrow-down\"><\/i>\n<\/a>\n<div class=\"px-6 pt-10 pb-12 mb-10 text-center bg-gray-100 rounded-b-xl sm:px-12 test\">\n    <div class=\"mb-8 text-2xl font-bold text-orange\">\n        Need legal advice?\n        <br>\n        <span class=\"text-lg not-prose\">\n                            Call <a href=\"tel:+448081968584\" class=\"not-prose\">0808 196 8584<\/a> for urgent assistance.\n                <br>\n                Otherwise, complete this form, and we will contact you within one business day.\n                    <\/span>\n    <\/div>\n\n    \n\n<div class=\"not-prose flex justify-center text-left gform_input_bg_white    \">\n    <script>\nvar gform;gform||(document.addEventListener(\"gform_main_scripts_loaded\",function(){gform.scriptsLoaded=!0}),document.addEventListener(\"gform\/theme\/scripts_loaded\",function(){gform.themeScriptsLoaded=!0}),window.addEventListener(\"DOMContentLoaded\",function(){gform.domLoaded=!0}),gform={domLoaded:!1,scriptsLoaded:!1,themeScriptsLoaded:!1,isFormEditor:()=>\"function\"==typeof InitializeEditor,callIfLoaded:function(o){return!(!gform.domLoaded||!gform.scriptsLoaded||!gform.themeScriptsLoaded&&!gform.isFormEditor()||(gform.isFormEditor()&&console.warn(\"The use of gform.initializeOnLoaded() is deprecated in the form editor context and will be removed in Gravity Forms 3.1.\"),o(),0))},initializeOnLoaded:function(o){gform.callIfLoaded(o)||(document.addEventListener(\"gform_main_scripts_loaded\",()=>{gform.scriptsLoaded=!0,gform.callIfLoaded(o)}),document.addEventListener(\"gform\/theme\/scripts_loaded\",()=>{gform.themeScriptsLoaded=!0,gform.callIfLoaded(o)}),window.addEventListener(\"DOMContentLoaded\",()=>{gform.domLoaded=!0,gform.callIfLoaded(o)}))},hooks:{action:{},filter:{}},addAction:function(o,r,e,t){gform.addHook(\"action\",o,r,e,t)},addFilter:function(o,r,e,t){gform.addHook(\"filter\",o,r,e,t)},doAction:function(o){gform.doHook(\"action\",o,arguments)},applyFilters:function(o){return gform.doHook(\"filter\",o,arguments)},removeAction:function(o,r){gform.removeHook(\"action\",o,r)},removeFilter:function(o,r,e){gform.removeHook(\"filter\",o,r,e)},addHook:function(o,r,e,t,n){null==gform.hooks[o][r]&&(gform.hooks[o][r]=[]);var d=gform.hooks[o][r];null==n&&(n=r+\"_\"+d.length),gform.hooks[o][r].push({tag:n,callable:e,priority:t=null==t?10:t})},doHook:function(r,o,e){var t;if(e=Array.prototype.slice.call(e,1),null!=gform.hooks[r][o]&&((o=gform.hooks[r][o]).sort(function(o,r){return o.priority-r.priority}),o.forEach(function(o){\"function\"!=typeof(t=o.callable)&&(t=window[t]),\"action\"==r?t.apply(null,e):e[0]=t.apply(null,e)})),\"filter\"==r)return e[0]},removeHook:function(o,r,t,n){var e;null!=gform.hooks[o][r]&&(e=(e=gform.hooks[o][r]).filter(function(o,r,e){return!!(null!=n&&n!=o.tag||null!=t&&t!=o.priority)}),gform.hooks[o][r]=e)}});\n<\/script>\n\n                <div class='gf_browser_gecko gform_wrapper gravity-theme gform-theme--no-framework lawyer-form_wrapper gplaceholder_wrapper form-with-labels-no-asterisks_wrapper has-new-validation-error-styling_wrapper' data-form-theme='gravity-theme' data-form-index='0' id='gform_wrapper_2453' style='display:none'><div id='gf_2453' class='gform_anchor' tabindex='-1'><\/div><form method='post' enctype='multipart\/form-data' target='gform_ajax_frame_2453' id='gform_2453' class='lawyer-form gplaceholder form-with-labels-no-asterisks has-new-validation-error-styling' action='\/api\/wp\/v2\/posts\/189599#gf_2453' data-formid='2453' novalidate>\n                        <div class='gform-body gform_body'><div id='gform_fields_2453' class='gform_fields top_label form_sublabel_below description_below validation_below'><div id=\"field_2453_1000\" class=\"gfield gfield--type-honeypot gform_validation_container field_sublabel_below gfield--has-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_1000'>X\/Twitter<\/label><div class='ginput_container'><input name='input_1000' id='input_2453_1000' type='text' value='' autocomplete='new-password'\/><\/div><div class='gfield_description' id='gfield_description_2453_1000'>This field is for validation purposes and should be left unchanged.<\/div><\/div><div id=\"field_2453_1\" class=\"gfield gfield--type-text gfield--input-type-text gf_left_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_1'>First Name<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_text'><input name='input_1' id='input_2453_1' type='text' value='' class='medium'     aria-required=\"true\" aria-invalid=\"false\"   \/><\/div><\/div><div id=\"field_2453_12\" class=\"gfield gfield--type-text gfield--input-type-text gf_right_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_12'>Last Name<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_text'><input name='input_12' id='input_2453_12' type='text' value='' class='medium'     aria-required=\"true\" aria-invalid=\"false\"   \/><\/div><\/div><div id=\"field_2453_2\" class=\"gfield gfield--type-email gfield--input-type-email gf_left_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_2'>Email Address<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_email'>\n                            <input name='input_2' id='input_2453_2' type='email' value='' class='medium'    aria-required=\"true\" aria-invalid=\"false\"  \/>\n                        <\/div><\/div><div id=\"field_2453_3\" class=\"gfield gfield--type-phone gfield--input-type-phone gf_right_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_3'>Phone<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_phone'><input name='input_3' id='input_2453_3' type='tel' value='' class='medium'   aria-required=\"true\" aria-invalid=\"false\"   \/><\/div><\/div><div id=\"field_2453_14\" class=\"gfield gfield--type-select gfield--input-type-select gfield--width-full custom-select gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_14'>Number of Employees in Your Business<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_select'><select name='input_14' id='input_2453_14' class='large gfield_select'    aria-required=\"true\" aria-invalid=\"false\" ><option value='' selected='selected'>Select ...<\/option><option value='0' >0<\/option><option value='1' >1-5<\/option><option value='6' >6-20<\/option><option value='21' >21-50<\/option><option value='51' >51-250<\/option><option value='250' >250+<\/option><\/select><\/div><\/div><div id=\"field_2453_4\" class=\"gfield gfield--type-textarea gfield--input-type-textarea gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_4'>Tell us about your enquiry<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_textarea'><textarea name='input_4' id='input_2453_4' class='textarea medium'     aria-required=\"true\" aria-invalid=\"false\"   rows='10' cols='50'><\/textarea><\/div><\/div><div id=\"field_2453_5\" class=\"gfield gfield--type-html gfield--input-type-html gfield_html gfield_html_formatted gfield_no_follows_desc field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  >By submitting this form, you agree to receive emails from LegalVision and can unsubscribe at any time. View our <a href=\"https:\/\/legalvision.co.uk\/privacy-notice\/\" target=\"_blank\">Privacy Policy<\/a>. <\/div><div id=\"field_2453_8\" class=\"gfield gfield--type-hidden gfield--input-type-hidden gform_hidden field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><div class='ginput_container ginput_container_text'><input name='input_8' id='input_2453_8' type='hidden' class='gform_hidden'  aria-invalid=\"false\" value='http:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/189599' \/><\/div><\/div><div id=\"field_2453_13\" class=\"gfield gfield--type-hidden gfield--input-type-hidden gform_hidden field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><div class='ginput_container ginput_container_text'><input name='input_13' id='input_2453_13' type='hidden' class='gform_hidden'  aria-invalid=\"false\" value='generic_form' \/><\/div><\/div><fieldset id=\"field_2453_999\" class=\"gfield gfield--type-checkbox gfield--type-choice gfield__uk-marketo-opt-in field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><legend class='gfield_label gform-field-label screen-reader-text' ><\/legend><div class='ginput_container ginput_container_checkbox'><div class='gfield_checkbox ' id='input_2453_999'><div class='gchoice gchoice_2453_999_1'>\n\t\t\t\t\t\t\t\t<input class='gfield-choice-input' name='input_999.1' type='checkbox'  value='1'  id='choice_2453_999_1'   \/>\n\t\t\t\t\t\t\t\t<label for='choice_2453_999_1' id='label_2453_999_1' class='gform-field-label gform-field-label--type-inline'>By submitting this form, you agree to receive content and event invitations from us to help you grow your business. If you do not want to receive such messages, tick here.<\/label>\n\t\t\t\t\t\t\t<\/div><\/div><\/div><\/fieldset><\/div><\/div>\n        <div class='gform-footer gform_footer top_label'> <button type=\"submit\" id=\"gform_submit_button_2453\" class=\"gform_button button\" onclick=\"gform.submission.handleButtonClick(this);\" data-submission-type=\"submit\"><span class=\"gform_submit_button__text\">Submit Now<\/span><\/button> <input type='hidden' name='gform_ajax' value='form_id=2453&amp;title=&amp;description=&amp;tabindex=0&amp;theme=gravity-theme&amp;hash=ec2463697d0d9cef7b71236ae60964c7' \/>\n            <input type='hidden' class='gform_hidden' name='gform_submission_method' data-js='gform_submission_method_2453' value='iframe' \/>\n            <input type='hidden' class='gform_hidden' name='gform_theme' data-js='gform_theme_2453' id='gform_theme_2453' value='gravity-theme' \/>\n            <input type='hidden' class='gform_hidden' name='gform_style_settings' data-js='gform_style_settings_2453' id='gform_style_settings_2453' value='' \/>\n            <input type='hidden' class='gform_hidden' name='is_submit_2453' value='1' \/>\n            <input type='hidden' class='gform_hidden' name='gform_submit' value='2453' \/>\n            \n            <input type='hidden' class='gform_hidden' name='gform_currency' data-currency='GBP' value='m8mbGMNYfTATkWOYIIWU2darAgwXeBQOxk6RxGIFqCBXzgI8+yrVQOGvM8oZ1FiVsqOC7TEuecCsJgAyNGh\/dA5HgE+kpvrlhIBdqw7+rJJAqhY=' \/>\n            <input type='hidden' class='gform_hidden' name='gform_unique_id' value='' \/>\n            <input type='hidden' class='gform_hidden' name='state_2453' value='WyJ7XCIxNFwiOltcIjIyODY0N2ViMWU3NTcxZjA4YTY4NGJmMDcwMTk3Y2I0XCIsXCJiMzk3YmQ1MDBmMmFjNjk1ODE4MzdmNTBhYTA2MzQ0OFwiLFwiNGYyNGZkZGEwMzlkNDUxMWFhZGE1NGYwZmQwZmNiZTdcIixcIjUyMmJkMDE2M2I2ZmEwOTI3NDZhZjU5YTg0ZmM1NDk5XCIsXCIzODRlNjk1YjQxMTAzMWFiYmQ2ODEyMGYyZWFhMDYyNlwiLFwiYjkzNDcwNTE2MjkxOGRjZWViMjQzNzRjNmE0NGVmNTlcIixcIjQxMTliODZhMzVjYzJiMWViNDZiMmQ4NjRlNGUzZmNjXCJdfSIsIjQ3MjNiMzA2ZDIyZGVkODA2N2YyMjYyOThkYzI1ODVmIl0=' \/>\n            <input type='hidden' autocomplete='off' class='gform_hidden' name='gform_target_page_number_2453' id='gform_target_page_number_2453' value='0' \/>\n            <input type='hidden' autocomplete='off' class='gform_hidden' name='gform_source_page_number_2453' id='gform_source_page_number_2453' value='1' \/>\n            <input type='hidden' name='gform_field_values' value='' \/>\n            \n        <\/div>\n                        <\/form>\n                        <\/div>\n\t\t                <iframe style='display:none;width:0px;height:0px;' src='about:blank' name='gform_ajax_frame_2453' id='gform_ajax_frame_2453' title='This iframe contains the logic required to handle Ajax powered Gravity Forms.'><\/iframe>\n\t\t                <script>\ngform.initializeOnLoaded( function() {gformInitSpinner( 2453, 'https:\/\/legalvision.co.uk\/wp-content\/themes\/legalv-v6\/img\/spinner.svg', true );jQuery('#gform_ajax_frame_2453').on('load',function(){var contents = jQuery(this).contents().find('*').html();var is_postback = contents.indexOf('GF_AJAX_POSTBACK') >= 0;if(!is_postback){return;}var form_content = jQuery(this).contents().find('#gform_wrapper_2453');var is_confirmation = jQuery(this).contents().find('#gform_confirmation_wrapper_2453').length > 0;var is_redirect = contents.indexOf('gformRedirect(){') >= 0;var is_form = form_content.length > 0 && ! is_redirect && ! is_confirmation;var mt = parseInt(jQuery('html').css('margin-top'), 10) + parseInt(jQuery('body').css('margin-top'), 10) + 100;if(is_form){form_content.find('form').css('opacity', 0);jQuery('#gform_wrapper_2453').html(form_content.html());if(form_content.hasClass('gform_validation_error')){jQuery('#gform_wrapper_2453').addClass('gform_validation_error');} else {jQuery('#gform_wrapper_2453').removeClass('gform_validation_error');}setTimeout( function() { \/* delay the scroll by 50 milliseconds to fix a bug in chrome *\/ jQuery(document).scrollTop(jQuery('#gform_wrapper_2453').offset().top - mt); }, 50 );if(window['gformInitDatepicker']) {gformInitDatepicker();}if(window['gformInitPriceFields']) {gformInitPriceFields();}var current_page = jQuery('#gform_source_page_number_2453').val();gformInitSpinner( 2453, 'https:\/\/legalvision.co.uk\/wp-content\/themes\/legalv-v6\/img\/spinner.svg', true );jQuery(document).trigger('gform_page_loaded', [2453, current_page]);window['gf_submitting_2453'] = false;}else if(!is_redirect){var confirmation_content = jQuery(this).contents().find('.GF_AJAX_POSTBACK').html();if(!confirmation_content){confirmation_content = contents;}jQuery('#gform_wrapper_2453').replaceWith(confirmation_content);jQuery(document).scrollTop(jQuery('#gf_2453').offset().top - mt);jQuery(document).trigger('gform_confirmation_loaded', [2453]);window['gf_submitting_2453'] = false;wp.a11y.speak(jQuery('#gform_confirmation_message_2453').text());}else{jQuery('#gform_2453').append(contents);if(window['gformRedirect']) {gformRedirect();}}jQuery(document).trigger(\"gform_pre_post_render\", [{ formId: \"2453\", currentPage: \"current_page\", abort: function() { this.preventDefault(); } }]);        if (event && event.defaultPrevented) {                return;        }        const gformWrapperDiv = document.getElementById( \"gform_wrapper_2453\" );        if ( gformWrapperDiv ) {            const visibilitySpan = document.createElement( \"span\" );            visibilitySpan.id = \"gform_visibility_test_2453\";            gformWrapperDiv.insertAdjacentElement( \"afterend\", visibilitySpan );        }        const visibilityTestDiv = document.getElementById( \"gform_visibility_test_2453\" );        let postRenderFired = false;        function triggerPostRender() {            if ( postRenderFired ) {                return;            }            postRenderFired = true;            gform.core.triggerPostRenderEvents( 2453, current_page );            if ( visibilityTestDiv ) {                visibilityTestDiv.parentNode.removeChild( visibilityTestDiv );            }        }        function debounce( func, wait, immediate ) {            var timeout;            return function() {                var context = this, args = arguments;                var later = function() {                    timeout = null;                    if ( !immediate ) func.apply( context, args );                };                var callNow = immediate && !timeout;                clearTimeout( timeout );                timeout = setTimeout( later, wait );                if ( callNow ) func.apply( context, args );            };        }        const debouncedTriggerPostRender = debounce( function() {            triggerPostRender();        }, 200 );        if ( visibilityTestDiv && visibilityTestDiv.offsetParent === null ) {            const observer = new MutationObserver( ( mutations ) => {                mutations.forEach( ( mutation ) => {                    if ( mutation.type === 'attributes' && visibilityTestDiv.offsetParent !== null ) {                        debouncedTriggerPostRender();                        observer.disconnect();                    }                });            });            observer.observe( document.body, {                attributes: true,                childList: false,                subtree: true,                attributeFilter: [ 'style', 'class' ],            });        } else {            triggerPostRender();        }    } );} );\n<\/script>\n<\/div>\n<\/div>\n<div id=\"content-next\"><!-- scroll anchor --><\/div>\n<h2 class=\"wp-block-heading\">How Can You Navigate the Roles of Data Controller and Processor?<\/h2>\n\n\n\n<p>Balancing the roles of the data controller and the processor can be complex. You must understand and comply with your obligations under each respective role.&nbsp;<\/p>\n\n\n\n<p>This can be complicated, but you can seek legal advice from a data protection lawyer to help you effectively manage these responsibilities.&nbsp;<\/p>\n\n\n\n<p>A data protection lawyer can assist you in understanding your obligations and putting in place any required policies and procedures to ensure that you comply with legal rules as both a controller and processor.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Key Takeaways<\/h2>\n\n\n\n<p>Understanding your role and obligations as a data controller and processor is vital and mandatory. Compliance with the UK GDPR requires careful planning and understanding of the obligations that apply to controllers and processors. When acting as both a controller and processor, your business will likely have a range of responsibilities with which you must prioritise and comply. If you are unsure about your obligations, you should seek legal advice from a data protection lawyer.\u00a0<\/p>\n\n\n\n<p>If you need advice on managing your responsibilities as a data controller and processor, LegalVision&#8217;s experienced <a href=\"https:\/\/legalvision.co.uk\/services\/data-privacy-it-lawyers\/\">Data, Privacy and IT lawyers<\/a> can assist you. For a low monthly fee, you will have unlimited access to lawyers who can answer your questions and draft and review your documents. Call us today at <a href=\"tel:+448081968584\" class=\"AVANSERnumber dynamic-number\">0808 196 8584<\/a> or visit our <a href=\"https:\/\/legalvision.co.uk\/membership\/\">membership page<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Frequently Asked Questions<\/h2>\n\n\n\n<p><strong>1. What is the UK GDPR?<\/strong><\/p>\n\n\n\n<p>The UK GDPR sets out the principles, rights, and obligations for handling personal data to protect individuals&#8217; privacy and ensure that organisations process data lawfully, fairly, and transparently.<\/p>\n\n\n\n<p><strong>2. What is the Distinction Between a Data Controller and a Data Processor?<\/strong><\/p>\n\n\n\n<p>A data controller determines the purposes and means of processing personal data. In contrast,&nbsp; a data processor processes personal data on behalf of the controller. Controllers are primarily responsible for ensuring compliance with data protection laws, but processors also have obligations in their own right under data protection law.&nbsp;<\/p>\n<div class=\"not-prose m-feedback-prompt\">\n    <!-- Thumbs up\/down bar -->\n    <div class=\"m-feedback-prompt__main\">\n        <div class=\"m-feedback-prompt__title\">Was this article helpful?<\/div>\n        <div>\n            <!--span class=\"m-feedback-prompt__button--text\">Thanks!<\/span-->\n            <button type=\"button\" class=\"m-feedback-prompt__button m-feedback-prompt__button--yes\"\n                    data-analytics-link=\"feedback-prompt:yes\" aria-label=\"Agree\">\n                <i class=\"fa-regular fa-thumbs-up fa-3x\"><\/i>\n            <\/button>\n            <button type=\"button\" class=\"m-feedback-prompt__button m-feedback-prompt__button--no\"\n                    data-analytics-link=\"feedback-prompt:no\" aria-label=\"Disagree\">\n                <i class=\"fa-regular fa-thumbs-down fa-3x\"><\/i>\n            <\/button>\n        <\/div>\n    <\/div>\n\n    <!-- Feedback form -->\n    <div class=\"m-feedback-prompt__form\">\n        <div class=\"m-feedback-prompt__form--thanks \">\n            <div>Thanks!<\/div>\n            <p>\n                We appreciate your feedback \u2013 your submission has been successfully received.            <\/p>\n        <\/div>\n        <form id=\"contact-form\" class=\"m-feedback-prompt__form--form\" action=\"\" method=\"post\">\n            <input type=\"hidden\" id=\"authenticity_token\" name=\"authenticity_token\" value=\"7ad8280d8e\" \/><input type=\"hidden\" name=\"_wp_http_referer\" value=\"\/api\/wp\/v2\/posts\/189599\" \/>            <input value=\"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/\" type=\"hidden\" name=\"currenturl\"\n                   id=\"currenturl\">\n            <input value=\"What Do I Need to Do If My Business is Both a Data Controller and Processor?\" type=\"hidden\" name=\"currenttitle\"\n                   id=\"currenttitle\">\n            <label>\n                <!-- display on thumbs-up -->\n                <span class=\"m-feedback-prompt__feedback m-feedback-prompt__feedback--yes\">\n                    Can you tell us <span class=\"font-semibold\">why<\/span> you found it helpful?\n                <\/span>\n\n                <!-- display on thumbs-down -->\n                <span class=\"m-feedback-prompt__feedback m-feedback-prompt__feedback--no text-lg\">\n                    How can we better improve this article?\n                <\/span>\n                <textarea name=\"feedbackmessage\" id=\"feedbackmessage\" required><\/textarea>\n            <\/label>\n\n            <div class=\"m-feedback-prompt__form--error\" id=\"form-submit-error\"><\/div>\n            <button id=\"submit-contact-form-button\" type=\"submit\" name=\"commit\" class=\"m-feedback-prompt__form--submit\"\n                    data-analytics-link=\"feedback-prompt:submit\">\n                Submit            <\/button>\n        <\/form>\n    <\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>If your business acts as both a data controller and a processor, you must understand and comply with various responsibilities under UK data protection law. Handling these distinct roles involves a range of obligations that you must not neglect, failing which you could face significant penalties. This article explores key data protection law considerations if<a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/\">Continue reading <span class=\"sr-only\">&#8220;What Do I Need to Do If My Business is Both a Data Controller and Processor?&#8221;<\/span><\/a><\/p>\n","protected":false},"author":13436,"featured_media":3184,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"","_relevanssi_noindex_reason":"","editor_notices":[],"footnotes":""},"categories":[27],"tags":[20,384,1341],"class_list":["post-189599","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-privacy-it","tag-small-business","tag-data-processor","tag-gdpr-compliance"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.1.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>What Do I Need to Do If My Business is Both a Data Controller and Processor? - LegalVision UK<\/title>\n<meta name=\"description\" content=\"This article explores key data protection law considerations if your business is a data controller and data processor.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What Do I Need to Do If My Business is Both a Data Controller and Processor? - LegalVision UK\" \/>\n<meta property=\"og:description\" content=\"This article explores key data protection law considerations if your business is a data controller and data processor.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/\" \/>\n<meta property=\"og:site_name\" content=\"LegalVision UK\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/LegalVision\" \/>\n<meta property=\"article:published_time\" content=\"2024-08-02T14:56:59+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-08-02T14:57:01+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2022\/05\/24121919\/business-image-0522125.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"873\" \/>\n\t<meta property=\"og:image:height\" content=\"582\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Sej Lamba\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@LegalVision_law\" \/>\n<meta name=\"twitter:site\" content=\"@LegalVision_law\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sej Lamba\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/\"},\"author\":{\"name\":\"Sej Lamba\",\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838\"},\"headline\":\"What Do I Need to Do If My Business is Both a Data Controller and Processor?\",\"datePublished\":\"2024-08-02T14:56:59+00:00\",\"dateModified\":\"2024-08-02T14:57:01+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/\"},\"wordCount\":1100,\"image\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2022\/05\/24121919\/business-image-0522125.jpg\",\"keywords\":[\"small business\",\"data processor\",\"GDPR compliance\"],\"articleSection\":[\"Data, Privacy and IT Articles\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/\",\"url\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/\",\"name\":\"What Do I Need to Do If My Business is Both a Data Controller and Processor? - LegalVision UK\",\"isPartOf\":{\"@id\":\"https:\/\/legalvision.co.uk\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2022\/05\/24121919\/business-image-0522125.jpg\",\"datePublished\":\"2024-08-02T14:56:59+00:00\",\"dateModified\":\"2024-08-02T14:57:01+00:00\",\"author\":{\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838\"},\"description\":\"This article explores key data protection law considerations if your business is a data controller and data processor.\",\"breadcrumb\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/#primaryimage\",\"url\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2022\/05\/24121919\/business-image-0522125.jpg\",\"contentUrl\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2022\/05\/24121919\/business-image-0522125.jpg\",\"width\":873,\"height\":582,\"caption\":\"Recording Conversations: Legal Considerations and Litigation\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/legalvision.co.uk\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Data, Privacy and IT Articles\",\"item\":\"https:\/\/legalvision.co.uk\/category\/data-privacy-it\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"What Do I Need to Do If My Business is Both a Data Controller and Processor?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/legalvision.co.uk\/#website\",\"url\":\"https:\/\/legalvision.co.uk\/\",\"name\":\"LegalVision UK\",\"description\":\"LegalVision is a commercial law firm in the UK with a commitment to innovation\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/legalvision.co.uk\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838\",\"name\":\"Sej Lamba\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/legalvision.co.uk\/wp-content\/uploads\/sites\/4\/2024\/11\/cropped-Sehaj-Lamba-96x96.jpg\",\"contentUrl\":\"https:\/\/legalvision.co.uk\/wp-content\/uploads\/sites\/4\/2024\/11\/cropped-Sehaj-Lamba-96x96.jpg\",\"caption\":\"Sej Lamba\"},\"description\":\"Sej is a Legal Content Writer at LegalVision. She is an experienced legal content writer who enjoys writing legal guides, blogs, and know-how tools for businesses. She studied History at University College London and then developed a passion for law, which inspired her to become a qualified lawyer. Sej enjoys drawing on her legal knowledge and practical commercial acumen to draft legal content that is commercially focused and easy for businesses to understand. She is passionate about breaking down complex legal concepts into clear and valuable insights which businesses can digest and learn from. Sej has a strong interest in fast-developing areas such as data privacy law and AI and has drafted articles which have been published in leading UK legal website publications, including The Lawyer and The Law Society Gazette websites.\",\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/sejlamba\/\"],\"url\":\"https:\/\/legalvision.co.uk\/author\/sehajlamba\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What Do I Need to Do If My Business is Both a Data Controller and Processor? - LegalVision UK","description":"This article explores key data protection law considerations if your business is a data controller and data processor.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/","og_locale":"en_GB","og_type":"article","og_title":"What Do I Need to Do If My Business is Both a Data Controller and Processor? - LegalVision UK","og_description":"This article explores key data protection law considerations if your business is a data controller and data processor.","og_url":"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/","og_site_name":"LegalVision UK","article_publisher":"https:\/\/www.facebook.com\/LegalVision","article_published_time":"2024-08-02T14:56:59+00:00","article_modified_time":"2024-08-02T14:57:01+00:00","og_image":[{"width":873,"height":582,"url":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2022\/05\/24121919\/business-image-0522125.jpg","type":"image\/jpeg"}],"author":"Sej Lamba","twitter_card":"summary_large_image","twitter_creator":"@LegalVision_law","twitter_site":"@LegalVision_law","twitter_misc":{"Written by":"Sej Lamba","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/#article","isPartOf":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/"},"author":{"name":"Sej Lamba","@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838"},"headline":"What Do I Need to Do If My Business is Both a Data Controller and Processor?","datePublished":"2024-08-02T14:56:59+00:00","dateModified":"2024-08-02T14:57:01+00:00","mainEntityOfPage":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/"},"wordCount":1100,"image":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/#primaryimage"},"thumbnailUrl":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2022\/05\/24121919\/business-image-0522125.jpg","keywords":["small business","data processor","GDPR compliance"],"articleSection":["Data, Privacy and IT Articles"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/","url":"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/","name":"What Do I Need to Do If My Business is Both a Data Controller and Processor? - LegalVision UK","isPartOf":{"@id":"https:\/\/legalvision.co.uk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/#primaryimage"},"image":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/#primaryimage"},"thumbnailUrl":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2022\/05\/24121919\/business-image-0522125.jpg","datePublished":"2024-08-02T14:56:59+00:00","dateModified":"2024-08-02T14:57:01+00:00","author":{"@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838"},"description":"This article explores key data protection law considerations if your business is a data controller and data processor.","breadcrumb":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/#primaryimage","url":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2022\/05\/24121919\/business-image-0522125.jpg","contentUrl":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2022\/05\/24121919\/business-image-0522125.jpg","width":873,"height":582,"caption":"Recording Conversations: Legal Considerations and Litigation"},{"@type":"BreadcrumbList","@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/business-both-data-controller-processor\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/legalvision.co.uk\/"},{"@type":"ListItem","position":2,"name":"Data, Privacy and IT Articles","item":"https:\/\/legalvision.co.uk\/category\/data-privacy-it\/"},{"@type":"ListItem","position":3,"name":"What Do I Need to Do If My Business is Both a Data Controller and Processor?"}]},{"@type":"WebSite","@id":"https:\/\/legalvision.co.uk\/#website","url":"https:\/\/legalvision.co.uk\/","name":"LegalVision UK","description":"LegalVision is a commercial law firm in the UK with a commitment to innovation","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/legalvision.co.uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838","name":"Sej Lamba","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/image\/","url":"https:\/\/legalvision.co.uk\/wp-content\/uploads\/sites\/4\/2024\/11\/cropped-Sehaj-Lamba-96x96.jpg","contentUrl":"https:\/\/legalvision.co.uk\/wp-content\/uploads\/sites\/4\/2024\/11\/cropped-Sehaj-Lamba-96x96.jpg","caption":"Sej Lamba"},"description":"Sej is a Legal Content Writer at LegalVision. She is an experienced legal content writer who enjoys writing legal guides, blogs, and know-how tools for businesses. She studied History at University College London and then developed a passion for law, which inspired her to become a qualified lawyer. Sej enjoys drawing on her legal knowledge and practical commercial acumen to draft legal content that is commercially focused and easy for businesses to understand. She is passionate about breaking down complex legal concepts into clear and valuable insights which businesses can digest and learn from. Sej has a strong interest in fast-developing areas such as data privacy law and AI and has drafted articles which have been published in leading UK legal website publications, including The Lawyer and The Law Society Gazette websites.","sameAs":["https:\/\/www.linkedin.com\/in\/sejlamba\/"],"url":"https:\/\/legalvision.co.uk\/author\/sehajlamba\/"}]}},"_links":{"self":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/189599","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/users\/13436"}],"replies":[{"embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/comments?post=189599"}],"version-history":[{"count":1,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/189599\/revisions"}],"predecessor-version":[{"id":189600,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/189599\/revisions\/189600"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/media\/3184"}],"wp:attachment":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/media?parent=189599"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/categories?post=189599"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/tags?post=189599"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}