Determination of role as controller or processor; context dependent

Sec. 3. Determining whether a person is acting as a controller or a processor with respect to a specific processing of data is a fact based determination that depends upon the context in which personal data is processed. A processor that continues to adhere to a controller's instructions with respect to a specific processing of personal data remains a processor. As added by P.L.94-2023, SEC.1.