Data controller v processor
In my case the bank is the controller and the solicitors are the processors. I know this as when I submitted the DSARs, the solicitors' forwarded it the bank and the bank responded. They did not respond in full (no data processing agreement etc). My N1 now needs to concentrate on the fact that the solicitors did not upload their processor obligations, did not supply the data processing agreement, impact assessment, DPA. Anyone had success in holding a processor to account? How did you navigate the particulars of the claim etc?