Certified Information Privacy Professional – Europe (CIPP/E) — Question 83

What is the consequence if a processor makes an independent decision regarding the purposes and means of processing it carries out on behalf of a controller?

Answer options

• A. The controller will be liable to pay an administrative fine
• B. The processor will be liable to pay compensation to affected data subjects
• C. The processor will be considered to be a controller in respect of the processing concerned
• D. The controller will be required to demonstrate that the unauthorized processing negatively affected one or more of the parties involved

Correct answer: C

Explanation

If a processor makes independent decisions about processing, it assumes the role of a controller for that processing, thereby bearing the associated responsibilities. Options A and B are incorrect because they pertain to liabilities that do not directly stem from the processor's independent decision-making. Option D is also incorrect, as it focuses on the controller's need to prove negative impacts rather than the change in the processor's status.