CHAPTER IIGENERAL RULES ON THE LAWFULNESS OF THE PROCESSING OF PERSONAL DATA
SECTION 7CONFIDENTIALITY AND SECURITY OF PROCESSING
Article 21Confidentiality of processing
A person employed with a Community institution or body and any Community institution or body itself acting as processor, with access to personal data, shall not process them except on instructions from the controller, unless required to do so by national or Community law.