Processing under the authority of the controller or processor (Article 29, GDPR)

Description

The processor and any person acting under the authority of the controller or of the processor, who has access to personal data, shall not process those data except on instructions from the controller, unless required to do so by Union or Member State law.

Importance

High

Source law

General Data Protection Regulation

Paragraph

Chapter IV, Section 1

Súvisiace pojmy:

Nadradený pojem:

Section 1 - General obligations (GDPR)

Susedné pojmy:

Responsibility of the controller (Article 24, GDPR)
Data protection by design and by default (Article 25, GDPR)
Joint controllers (Article 26, GDPR)
Representatives of controllers or processors not established in the Union (Article 27, GDPR)
Processor (General obligations, Article 28, GDPR)
Records of processing activities (Article 30, GDPR)
Cooperation with the supervisory authority (Article 31, GDPR)