# Representatives of controllers or processors not established in the Union 27(2) — GDPR — provision context

> Focused context for a single provision (27(2)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-27#par-2
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Representatives of controllers or processors not established in the Union** (GDPR, full article: https://overview.legal/laws/gdpr/art-27).

## Provision text

### 27(2)

The obligation laid down in paragraph 1 of this Article shall not apply to:

a) processing which is occasional, does not include, on a large scale, processing of special categories of data as referred to in Article 9(1) or processing of personal data relating to criminal convictions and offences referred to in Article 10, and is unlikely to result in a risk to the rights and freedoms of natural persons, taking into account the nature, context, scope and purposes of the processing; or
b) a public authority or body.

## Cited by (exact-provision citations)

- **Guidelines 3/2018 on the territorial scope of the GDPR (Article 3)** (guidance) — https://overview.legal/posts/38074
- **EDPB-EDPS Joint Opinion 02/2023 on the Proposal for a Regulation of the European Parliament and of the Council on the establishment of the digital euro** (guidance) — https://overview.legal/posts/125823
- **EDPB-EDPS Joint Opinion 01/2023 on the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679** (guidance) — https://overview.legal/posts/125829
- **EDPB-EDPS Joint Opinion 2/2022 on the Proposal of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act)** (guidance) — https://overview.legal/posts/125945

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-27#par-2 · 2026-08-22