Processing under the authority of the controller or processor
The processor and any person acting under the authority of the controller or the processor who has access to personal data shall process them only on instructions from the controller, unless he is required to process them by Union or Member State law.
