Skip to main content
Version status: In force | Document consolidation status: Assimilated law updated to reflect all known changes
Version date: 31 December 2020 - onwards
Version 2 of 2

Article 27 Representatives of controllers or processors not established in the United Kingdom

1. Where Article 3(2) applies, the controller or the processor shall designate in writing a representative in the United Kingdom.

2. The obligation laid down in paragraph 1 of this Article shall not apply to:

(a) processing which is occasional, does not include, on a large scale, processing of special categories of data as referred to in Article 9(1) or processing of personal data relating to criminal convictions and offences referred to in Article 10, and is unlikely to result in a risk to the rights and freedoms of natural persons, taking into account the nature, context, scope and purposes of the processing; or

(b) a public authority or body.

3. [deleted]