Certified Information Privacy Professional – Europe (CIPP/E) — Question 279

When cookies of a third party (e.g., a social media, travel, or online banking website) are implemented by your organization’s website, your organization acts as which of the following?

Answer options

• A. A controller.
• B. A processor.
• C. A joint controller.
• D. A sub-processor.

Correct answer: C

Explanation

Your organization acts as a joint controller because it collaborates with the third-party cookie provider to determine the purposes and means of processing personal data. The other options are incorrect as a controller solely makes decisions independently, a processor acts on behalf of a controller without joint decisions, and a sub-processor works under the authority of a primary processor.