Article 29 GDPR
Processing under the authority of the controller or processor
The processor and any person acting under the authority of the controller or of the processor, who has access to personal data, shall not process those data except on instructions from the controller, unless required to do so by Union or Member State law.
Professor mr drs Romeo F. Kadir MA MSc LLM LLM (Adv) EMBA EMoC
First appointed Data Protection Officer (DPO) ever in the Netherlands (European Union) at a semi-public entity. Seasoned European Privacy and Data Protection Expert (20+ years of practical experience in EU Privacy and Data Protection Law, Business Management, Compliance and Ethics).
Studied European and International Law, Political Sciences and Business Administration. At Present EIPACC EADPP Professor European Privacy & Data Protection Law at Universitas Padjadjaran UNpad (Indonesia) and Honorary Visiting Research Fellow with O.P. Jindal Global University (New Delhi), Senior Associate Fellow with Vidhi Centre for Legal Policy (New Delhi), Lecturer Science Honours Academy and Lecturer at the International Molengraaff Institute, Utrecht University (UU, Netherlands). In 2010 he was founder of the first European Data Protection Academy focusing on privacy-only executive education.
Present Occupations in European Data Protection Law
President European Institute for Privacy, Audit, Compliance & Certification (EIPACC),
Vice-President European Association for Data Protection Professionals (EADPP),
Chair EADPP Certification Committee Data Protection Professionals,
Chair EADPP Academic Board,
Chair EADPP Expert Committee on Cybersecurity,
Chair EADPP Expert Committee on Artificial Intelligence (AI),
Member of the International Board of Experts with EuroPrivacy Certification Scheme (Geneva and Luxembourg),
President Supervisory Board of the Dutch Privacy Complaints Office (NPKI),
Rapporteur to UN Monitoring Commission Human Rights on behalf of the Dutch Privacy Foundation (SPN),
Author of 'Handbook DPO - A Practical Guide', Privacy Publishing Group (PPG),
Editor-in-Chief of ‘Data Protection Dictionary’, authored, edited and coordinated ‘Handbook for the Data Protection Officer – A practical Guide’, ‘The Ultimate GDPR Business Guide – Six Volumes’ and other relevant books in the field of privacy and data protection.
You may also like
Guidelines 9/2020 on relevant and reasoned objection under Regulation 2016/679 Paragraph 3.2.3 Risks to free flow of personal data within the Union 44. Where the objection will refer to this particular risk, the CSA will need to clarify why it …
Guidelines 9/2020 on relevant and reasoned objection under Regulation 2016/679 Paragraph 3.2.2 Risks to fundamental rights and freedoms of data subjects 39. The issue at stake concerns the impact the draft decision as a whole would have on the data …
Guidelines 9/2020 on relevant and reasoned objection under Regulation 2016/679 Paragraph 3.2.1 Meaning of “significance of the risks” 35. It is important to bear in mind that the goal of the work carried out by SAs is that of protecting …