Eu - LISA shall be liable for unlawful personal data processing operations in accordance with its role as processor or , where applicable , controller .