It depends on the context of the relationship. Sometimes we are a Data Controller e.g. if we work directly with an individual to carry out a screening check for them then we are most likely the Data Controller. Whereas, if we work with a business and carry out screening checks for a number of their employees or prospective employees then we will most likely be the Data Processor.

This is just a general indication, not a hard and fast rule. The nature of our role changes depending on the purpose and context in which we are handling data, as well as the type of contract we have with a business or individual. You can read more about the roles of Controllers and Processors on the ICO’s website.