Who needs an EU representative under GDPR?
Certain controllers and processors outside the EU whose processing is subject to Article 3(2) must designate an EU representative unless a specific exception applies.
The assessment considers establishment, EU targeting, monitoring, the nature and scale of processing and the exceptions in Article 27.
What should you do next?
If you are unsure whether Article 27 applies to your organisation, use the EURepNow eligibility assessment before purchasing representation.
Primary legal reference: Regulation (EU) 2016/679 — Articles 3 and 27. Official text.