GDPR – Regulation (EU) 2016/679 – Article 29 – Processing under the authority of the controller or processor
Articles
Article 29Processing under the authority of the controller or processor
The processor and any person acting under the authority of the controller or of the processor, who has access to personal data, shall not process those data except on instructions from the controller, unless required to do so by Union or Member State law.
https://gdpr.digiphile.law/article/article-29.html
Text as at 19 September 2026.
This is an unofficial convenience version of the EU GDPR (Regulation (EU) 2016/679). It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.