CHAPTER IV . Section 1
UK GDPR Article 29: Processing under the authority of the controller or processor
The processor and any person acting under the authority of the controller or of the processor, who has access to personal data, shall not process those data except on instructions from the controller, unless required to do so by domestic law.
Source text: legislation.gov.uk, the UK statute book (EU-retained Regulation 2016/679). The parser was validated against the UK Article 27 verified in REP-08.