Despite that GDPR is coming up on its fifth anniversary, people are still asking questions like "What is a 'data controller' or a 'data processor' under GDPR?" And "How is a GDPR data processor different from a GDPR data controller?" And even "Can a company be both a data processor and a data controller at the same time under the EU General Data Protection Regulation?" And the ever important question: "Do we have to comply with GDPR if we are in the U.S.?" Here are the answers.