A controller asserts that only processors can receive administrative fines under the GDPR. What is the correct position?
Select an answer to reveal the explanation.
Short Explanation
Both the pilot and the maintenance crew can get cited for their own rule breaks. Controllers and processors each carry fine exposure for the GDPR duties that apply to them—not a one-sided 'processors only' myth.
Full Explanation
Article 83 administrative fines can apply to controllers and processors according to the provisions each has infringed. Controllers are not shielded by blaming processors alone, and processors are not immune merely because a commercial brochure was signed. Data subjects are not the targets of Art. 83 fines in place of organisations.