lexiara

Article 29

GDPR

The processor and any person acting under the authority of the controller or of the processor, who has access to personal data, shall not process those data except on instructions from the controller, unless required to do so by Union or Member State law.

Cited at article level by

COMMUNICATION FROM THE COMMISSION TO THE EUROPEAN PARLIAMENT AND THE… (EU) — sign in to see which provisions, and what they say.

· All articles ·

Source: EUR-Lex (Cellar) · retrieved 2026-09-25 · Text as adopted (Official Journal); later amendments are not incorporated in this text.