Article 16
Confidentiality of processing Any person acting under the authority of the controller or of the processor, including the processor himself, who has access to personal data must not process them except on instructions from the controller, unless he is required to do so by law.
← art_15__para_2__continuation__2 · All articles · art_16__para →
Source: EUR-Lex (Cellar) · retrieved 2026-10-09 · Text as adopted (Official Journal); later amendments are not incorporated in this text.