A data processor is anyone (other than an employee of the data controller) that processes personal data on behalf of the data controller.
A data controller controls how and why personal data is processed. People’s Partnership, provider of The People’s Pension, is a data controller in its own right. As joint data controllers, both People’s Partnership and the employer have full responsibility for the compliance and accountability of the data collected and used.
For more information, see The Information Commissioner’s website »
For more information see What is GDPR?