GDPRRegulation (EU) 2016/679
Article 29: Processing under the authority of the controller or processor
GDPR Art. 29, Chapter IV, Section 1
The processor and any person acting under the authority of the controller or of the processor, who has access to personal data, shall not process those data except on instructions from the controller, unless required to do so by Union or Member State law.
44 words in the official text.
Sits inside (2)
Source texts: the Official Journal, through the Publications Office. Dataset built 2026-07-29. Study aid, not legal advice.
Every connection on this page is drawn from the official text of Regulation (EU) 2016/679. Study aid, not legal advice.
See how GDPR sits beside the other three acts on the crossover map, or find what your role must do in the obligations checklist.