Apr 17, 2019· Interestingly, the fine was not against the Movimento 5 Stelle that is the data controller of the platform but against the Rousseau association that is the data processor. For the first time, the data protection authority did not consider that the data controller is liable for whatever performed by the data processor and recognized that there could be a liability of the data processor, without liability of the .