Article 27 — Representatives of controllers or processors not established in the Union
Consumer protectionLevel 1RegulationGDPRApplies from 25 May 2018Official source
27(1)Copy link
1.Where Article 3(2) applies, the controller or the processor shall designate in writing a representative in the Union.
27(2)(a)
(a)processing which is occasional, does not include, on a large scale, processing of special categories of data as referred to in Article 9(1) or processing of personal data relating to criminal convictions and offences referred to in Article 10, and is unlikely to result in a risk to the rights and freedoms of natural persons, taking into account the nature, context, scope and purposes of the processing; or
Copy link27(3)Copy link
3.The representative shall be established in one of the Member States where the data subjects, whose personal data are processed in relation to the offering of goods or services to them, or whose behaviour is monitored, are.
27(4)Copy link
4.The representative shall be mandated by the controller or processor to be addressed in addition to or instead of the controller or the processor by, in particular, supervisory authorities and data subjects, on all issues related to processing, for the purposes of ensuring compliance with this Regulation.