A controller instructs its processor to keep processing in a way the processor reasonably believes infringes the GDPR. What should the processor do?
Select an answer to reveal the explanation.
Short Explanation
If the boss tells the warehouse to ship something illegal, a good warehouse doesn't just shrug and load the truck—they flag it. Processors should tell the controller when an instruction looks like a GDPR breach.
Full Explanation
Under GDPR, a processor must inform the controller if, in its opinion, an instruction infringes the Regulation or other Union or Member State data-protection provisions. Blind obedience to unlawful instructions is not required and can increase liability exposure. Processors do not self-issue Art. 83 fines or 'protest' by disclosing personal data.