GDPR Article 29: Processing under the authority of controller or processor

All 99 Articles Chapter 4: Controller and Processor

Anyone acting under a controller or processor may only process personal data on documented instructions — not on their own initiative.

These summaries are a plain-English orientation only and are not a substitute for the official text of the Regulation or for legal advice.

Need to apply Article 29?

Our data-protection lawyers turn the text into a plan.

Article 29 — Processing under the authority of controller or processor