Section 60 Processing under the authority of the controller or processorI1

A processor, and any person acting under the authority of a controller or processor, who has access to personal data may not process the data except—