The data processor acts according to instructions. 3.1 The data processor shall process personal data only on documented instructions from the data controller, unless required to do so by Union or Member State law to which the proces- sor is subject. Such instructions shall be specified in appendices A and C. Subsequent in- structions can also be given by the data controller throughout the duration of the processing of personal data, but such instructions shall always be documented and kept in writing, in- cluding electronically, in connection with the Clauses.
