A client tells a contractor to collect identifiable footage. Who should analyse data protection roles?

Correct answer: C. The parties should identify their roles and duties for the processing.

The actual arrangement determines controller and processor responsibilities; a client instruction does not settle the issue by itself.