A company’s public privacy notice names its cloud processor as if that vendor were the controller deciding purposes and means. What identification error must be fixed?
Select an answer to reveal the explanation.
Short Explanation
The controller is the one steering the ship—setting purposes and means—not the dockworker hosting the cargo. Putting the processor’s name in the controller slot confuses everyone about who is accountable. Fix the notice so the real controller (and any joint-controller essentials) is clearly named.
Full Explanation
Transparency requires clear identification of the controller. A processor processes on documented instructions and must not be mislabelled as the controller in public notices. Where joint controllers exist, data subjects should be informed of the essence of the arrangement. Hosting alone does not make a processor a joint controller, DPO details do not replace controller identity, and omitting the controller undermines information obligations.