A new blog discusses the draft guidelines regarding controllers and processors in the GDPR that were issued by the European Data Protection Board (EDPB). It considers roles from the perspective of a relationship to a controller or processor. Depending on the circumstances, a controller or a processor may be classified as controllers for processing activities for which they determine the purpose and means.