A Data Processor handles data on behalf of a controller.

Key Points:
1) Cannot use data for own purposes
2) Must follow contracts
3) Needs strong security.

A cloud provider processes data for an e-commerce site, working under the Data Controller.