UK GDPR (UK General Data Protection Regulation) Art.29: Article 29 Processing under the authority of the controller or processor

The processor and anyone acting under the authority of the controller or processor with access to personal data may process it only on the controller's instructions, unless domestic law requires otherwise.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Chapter IV: Controller and processor – UK GDPR (UK General Data Protection Regulation)

Art.24 Article 24 Responsibility of the controller
Art.25 Article 25 Data protection by design and by default
Art.26 Article 26 Joint controllers
Art.27 Article 27 Representatives of controllers or processors not established in the United Kingdom
Art.28 Article 28 Processor
Art.30 Article 30 Records of processing activities
Art.31 Article 31 Cooperation with the Commissioner
Art.32 Article 32 Security of processing

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All UK GDPR (UK General Data Protection Regulation) controls