The processor and any person acting under the authority of the controller or of the processor, who has access to personal data, shall not process those data except on instructions from the controller, unless required to do so by domestic law.
Version status: In force | Document consolidation status: Assimilated law updated to reflect all known changes
Version date: 31 December 2020