Instruct: Classify the following sentence into a predefined topic category:
Who should ensure that any natural person acting under the authority of the controller or the processor who has access to personal data does not process them except on instructions from the controller?
Assign it to one of the following topics:[Chapter 4: Controller and processor, Chapter 5: Transfers of personal data to third countries or international organisations, Chapter 11: Final provisions, Chapter 7: Cooperation and consistency, Chapter 6: Independent supervisory authorities, Chapter 3: Rights of the data subject, Chapter 8: Remedies, liability and penalties, Chapter 2: Principles, Chapter 9: Provisions relating to specific processing situations, Chapter 1: General provisions, Chapter 10: Delegated acts and implementing acts]
Output: