EU regulatory register · GDPR
Article 27Representatives of controllers or processors not established in the Union
CELEX 32016R0679 · Read on 2026-08-18 · Chapter IV
Short answer
1. Where Article 3(2) applies, the controller or the processor shall designate in writing a representative in the Union.
Verbatim from the article. Source: NovaCopilot · https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-27 · Short answer as data · Official text
Official text
Read from the EU Publications Office for this CELEX number. The wording stands as published; nothing here is rewritten or summarised.
1. Where Article 3(2) applies, the controller or the processor shall designate in writing a representative in the Union.
2. The obligation laid down in paragraph 1 of this Article shall not apply to:
(a)
processing which is occasional, does not include, on a large scale, processing of special categories of data as referred to in Article 9(1) or processing of personal data relating to criminal convictions and offences referred to in Article 10, and is unlikely to result in a risk to the rights and freedoms of natural persons, taking into account the nature, context, scope and purposes of the processing; or
(b)
a public authority or body.
3. The representative shall be established in one of the Member States where the data subjects, whose personal data are processed in relation to the offering of goods or services to them, or whose behaviour is monitored, are.
4. The representative shall be mandated by the controller or processor to be addressed in addition to or instead of the controller or the processor by, in particular, supervisory authorities and data subjects, on all issues related to processing, for the purposes of ensuring compliance with this Regulation.
5. The designation of a representative by the controller or processor shall be without prejudice to legal actions which could be initiated against the controller or the processor themselves.
Follow-up questions
Other articles in this chapter
Related articles
Articles in other acts connected to this one, with the reason written against the text. The map is a route between acts, not an assessment.
- Analogous to · mutualAI Act · 22
Both articles require a representative inside the union for a party established outside it, with the same role as the point of contact for supervision.
CELEX 32024R1689 · 2026-08-18
Knowledge card
- Applies
- controller: Designate in writing a representative in the Union when not established in the Union but subject to Article 3(2), unless the processing is occasional and low risk.
- Risk if ignored
- high
- What to do
- Designate in writing a representative in the Union when not established in the Union but subject to Article 3(2), unless the processing is occasional and low risk.
- Deadline
- No fixed deadline in the register
card:eu:article:gdpr--art-27 · sha256 c18fd02367d7 · Source: NovaCopilot
Risk, sanction and outcome
Art. 27 · controller
Risk: high · Sanction: administrative_fine, högst EUR 10 000 000 · Authority: Competent supervisory authority
Decisions applying the provision: none in the register
Full chain (JSON)
Outcomes are counted from stored judgments that cite the provision verbatim. Source: NovaCopilot
The text is quoted from the official source and is not legal advice. A national court reads the language version that binds in its jurisdiction.
Verifiable trust signals
- Source-linked answers and explicit evidence gaps
- Obligations, controls, risks and consequences
- Stable objects and verifiable checksums
- Rule-based objects, optional source-linked reasoning
- Model card, source status and audit