Explains controller and processor roles in data sharing
Controller, joint controllers (GDPR Art. 26) and processors acting only on instructions (Art. 28(3)(a)); a recipient using data for its own purposes is a controller for that use.
Can AI do this?
AI does this well Most of the tested AI models master this. 3 of 4 models in the current benchmark master it.
| Model | Tier | Probability of mastery | Status |
|---|---|---|---|
| gemini-4-argon | Flagship | 100% | Mastered |
| gemini-3.5-flash-lite | Low cost | 65% | Not shown |
| gpt-6-luna | Low cost | 100% | Mastered |
| claude-haiku-5-5 | Low cost | 100% | Mastered |
Mastered means a probability of at least 90% that the model has this knobit, estimated from its graded answers. “Not shown” means the answers do not settle it either way. How the models are tested.
What it looks like in practice
Expected result: Controller, joint controllers (GDPR Art. 26) and processors acting only on instructions (Art. 28(3)(a)); a recipient using data for its own purposes is a controller for that use.
How it is assessed: Answers a written question on the controller and processor roles correctly
Related knobits
Needed for
- N-502 Recognises onward use left open in a sharing agreement
- N-507 Recognises a sharing role not stated
- N-532 Restricts a recipient's use to the agreed purpose
All 14 knobits of Agree data sharing.
Source: Practice the stage 5 reference and review checklist rest on