# Representatives of controllers or processors not established in the Union 27(a) — GDPR — provision context

> Focused context for a single provision (27(a)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-27#par-2-pnt-a
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Representatives of controllers or processors not established in the Union** (GDPR, full article: https://overview.legal/laws/gdpr/art-27).

## Provision text

### 27(a)

processing which is occasional, does not include, on a large scale, processing of special categories of data as referred to in Article 9(1) or processing of personal data relating to criminal convictions and offences referred to in Article 10, and is unlikely to result in a risk to the rights and freedoms of natural persons, taking into account the nature, context, scope and purposes of the processing; or


## Topics on this provision

- **Special Categories of Data** — https://overview.legal/topics/bijzondere-persoonsgegevens
  Sensitive data requiring enhanced protection (health, biometric, etc.)
- **Criminal Data** — https://overview.legal/topics/criminal-data
  Processing of criminal convictions and offences
- **Types of Special Categories of Personal Data** — https://overview.legal/topics/special-categories-data-types
  A dedicated topic is needed to comprehensively cover the specific types and definitions of special categories of personal data, including racial/ethnic origin, 
- **Personal Data** — https://overview.legal/topics/persoonsgegevens
  Information relating to identified or identifiable natural persons
- **Processing** — https://overview.legal/topics/verwerking
  Any operation performed on personal data

## Cited by (exact-provision citations)

- **Judgment of the General Court (Fourth Chamber) of 20 July 2016 (Extracts).#Athanassios Oikonomopoulos v European Commission.#Non-contractual liability — Damage caused by the Commission in the context of an OLAF investigation and by OLAF — Actions for damages — Action for a declaration that certain measures taken by OLAF were void and inadmissible for evidentiary purposes before the national authorities — Admissibility — Misuse of powers — Processing of personal data — Rights of the defence.#Case** (case-law) — https://overview.legal/posts/132355
- **Judgment of the General Court (Fourth Chamber) of 20 July 2016 (Extracts).#Athanassios Oikonomopoulos v European Commission.#Non-contractual liability — Damage caused by the Commission in the context of an OLAF investigation and by OLAF — Actions for damages — Action for a declaration that certain measures taken by OLAF were void and inadmissible for evidentiary purposes before the national authorities — Admissibility — Misuse of powers — Processing of personal data — Rights of the defence.#Case** ¶107 (case-law, General Court) — https://overview.legal/posts/132355
- **Guidelines 3/2018 on the territorial scope of the GDPR (Article 3)** (guidance) — https://overview.legal/posts/38074

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-27#par-2-pnt-a · 2026-08-22