Article 29: Processing under the authority of the controller or processor
Praxikon tracks Article 29 (Processing under the authority of the controller or processor) under the GDPR, alongside the EU AI Act, citing the source for every statement.
Chapter IVIn force since 25-05-2018
Official text
/
The processor and any person acting under the authority of the controller or of the processor, who has access to personal data, shall not process those data except on instructions from the controller, unless required to do so by Union or Member State law.
Source: EUR-Lex, Regulation (EU) 2016/679. Official text, reproduced without modification.