A data processor is an individual or organization that processes personal data on behalf of a data controller. The data processor acts under the authority and instructions of the data controller and handles personal data based on the controller's requirements.