Any person acting under the authority of the controller or of the processor, including the processor himself, who has access to personal data must not process them except on instructions from the controller, unless he is required to do so by law.
Version status: Repealed | Document consolidation status: Updated to reflect all known changes
Version date: 25 May 2018 - onwards
Article 16 Confidentiality of processing
Repealed from 25 May 2018