Regulation (EU) 2016/679 as retained in UK law (UK GDPR) – Article 29 – Processing under the authority of the controller or processor
Articles
Article 29Processing under the authority of the controller or processor
The processor and any person acting under the authority of the controller or of the processor, who has access to personal data, shall not process those data except on instructions from the controller, unless required to do so by [F1domestic law].
Annotations and footnotes
Textual Amendments
- F1 Words in Art. 29 substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 1 para. 23 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
https://uk-gdpr.digiphile.law/article/article-29.html
Text as at 17 September 2026.
This is an unofficial convenience version of the UK GDPR (Regulation (EU) 2016/679 as retained in UK law). It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.