Processing by a processor shall be governed by a contract or other legal act under Union or Member State law, that is binding on the processor with regard to the controller and that sets out the subject matter and duration of the processing, the nature and purpose of the processing, the type of operational personal data and categories of data subjects and the obligations and rights of the controller.
An phróiseáil a dhéanfaidh próiseálaí, rialófar é le conradh nó le gníomh dlí eile faoi dhlí an Aontais nó faoi dhlí Ballstáit atá ina cheangal ar an bpróiseálaí i dtaca leis an rialaitheoir agus ina leagtar amach ábhar agus fad na próiseála, cineál agus críoch na próiseála, cineál na sonraí pearsanta oibríochtúla agus catagóirí na n-ábhar sonraí agus oibleagáidí agus cearta an rialaitheora.