A processor argues that EDPB guidance on controller and processor roles can be ignored because the written contract already looks clear. Which statement best reflects how that guidance should be used?

Controller and processor status turn on the GDPR’s criteria for determining purposes and means, not solely on how parties label themselves in a contract. The EDPB’s guidance and opinions are widely used interpretive aids that clarify those role analyses in practice. Dismissing them because a contract ‘looks clear’ risks misclassifying responsibilities that remain grounded in the Regulation’s substance.