What is Controller and processor?
Under data protection law, the controller decides why and how data is processed; the processor handles it on the controller's behalf.
Why it matters
It defines who is responsible for what, and what the contract between the clinic and the vendor must say.