§ 47 HDSIG
Processing on the Instructions of the Controller
(1)The processor and any person acting under the authority of the controller or of the processor who has access to personal data may process those data only on the instructions of the controller, unless required to do so by a legal provision. zur Einzelansicht § 47