Article 29 of GDPR: Data processing based on instructions
Article 29 of GDPR indicates that a data processor or any person acting under the authority of the data controller or of the data processor who may have access to personal data can only process the data based on the specific instructions of the data controller.
At the end of the day, the data controller must provide the necessary instructions as to how personal data must be processed.
Recitals applicable to Article 29 of GDPR
Relevant Recitals: None
GDPR Regulation article-by-article overview
Read our comprehensive overview of the GDPR Regulation, article by article, where we summarize each of the 99 articles contained in GDPR to give you a complete understanding of its content.
Cited Legislation in Article 29 or relevant recitals
None
GDPR Text: Article 29 of GDPR and Relevant Recitals
GDPR Text Source: EUR-Lex
Official GDPR Text: General Data Protection Regulation
Official GDPR Title: REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), corrected by Corrigendum, OJL 127, 23.5.2018, p. 2 ((EU) 2016/679)
