ICAEW BL · Chapter 12 · Question 10 of 12
Fernbrook Ltd uses an external payroll bureau to calculate and pay its employees' salaries. The bureau processes employees' personal data only on Fernbrook's documented instructions. Under the UK GDPR, how are the parties classified?
Test yourself: pick an answer
Reveal answer & explanation
Correct answer: B) Fernbrook Ltd is the controller and the payroll bureau is a processor
Explanation
A controller decides the purposes and means of processing personal data. A processor processes personal data on behalf of the controller and on its instructions. Fernbrook decides why and how its employees' data is used, so it is the controller, and the bureau is its processor. The employees are the data subjects, and payroll data is not exempt.
More Employment law and data protection MCQs
- Q12Under the UK GDPR, which of the following is NOT a 'special category' of personal data requiring an additional condition for processing?
- Q1Dev provides IT support services to Calloway Ltd. Which combination of facts most strongly suggests that Dev is an EMPLOYEE of Calloway…
- Q2Which of the following is NOT generally an implied common-law duty of an employer towards its employees?
- Q3Marisol's contract entitles her to three months' notice. Her employer discovers that she has been secretly diverting its clients to her…
- Q4Without consultation or contractual authority, Lockhart Ltd cuts the salary of its office manager, Tess, by 20%. Tess grumbles to a…