Legal sources with official primary sources

Printed ·

SMLM Previewerrors, bugs and incomplete coverage may occurThe model is production-ready during Q4-26

Skip to main content
Skip to the answer

Back to the act

EU regulatory register · GDPR

Article 29Processing under the authority of the controller or processor

CELEX 32016R0679 · Read on 2026-08-18 · Chapter IV

Share this page

Short answer

The processor and any person acting under the authority of the controller or of the processor, who has access to personal data, shall not process those data except on instructions from the controller, unless required to do so by Union or Member State law.

Verbatim from the article. Source: NovaCopilot · https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-29 · Short answer as data · Official text

Official text

Read from the EU Publications Office for this CELEX number. The wording stands as published; nothing here is rewritten or summarised.

The processor and any person acting under the authority of the controller or of the processor, who has access to personal data, shall not process those data except on instructions from the controller, unless required to do so by Union or Member State law.

Open the article on EUR-Lex

Follow-up questions

Other articles in this chapter

Judgments of the Court of Justice

1 decisions

  • C-741/21Court of Justice of the European Union

    GP v juris GmbH

    Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 82 – Right to compensation for damage caused by data processing that infringes that regulation – Concept of ‘non-material damage’ – Impact of the seriousness of the damage suffered – Liability of the controller – Possible exemption in the event of default of a person acting under his or her authority within the meaning of Article 29 – Assessment of the amount of compensation – Inapplicability of the criteria laid down for administrative fines in Article 83 – Assessment in the event of multiple infringements of that regulation.

    Ask NovaCopilot

Judgments applying this article

3 judgments in the register cite the article in their text. EU 2 · DE 1

Source: NovaCopilot

The text is quoted from the official source and is not legal advice. A national court reads the language version that binds in its jurisdiction.

Verifiable trust signals

  • Source-linked answers and explicit evidence gaps
  • Obligations, controls, risks and consequences
  • Stable objects and verifiable checksums
  • Rule-based objects, optional source-linked reasoning
  • Model card, source status and audit

Model cardAudit