Article 27
Article 27 – Processing under the authority of the controller and processor
Commission Proposal
The processor and any person acting under the authority of the controller or of the processor who has access to personal data shall not process them except on instructions from the controller, unless required to do so by Union or Member State law. |