Controllers and processors

In GDPR terms, the controller and processor each have distinct responsibilities for data protection, and failures in these responsibilities can lead to serious consequences.

Imagine you're part of a data protection team and must classify each responsibility related to British Airways' scenario as either that of a Data Controller or a Data Processor.