# Representatives of controllers or processors not established in the Union 27(3) — GDPR — provision context

> Focused context for a single provision (27(3)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-27#par-3
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Representatives of controllers or processors not established in the Union** (GDPR, full article: https://overview.legal/laws/gdpr/art-27).

## Provision text

### 27(3)

The representative shall be established in one of the Member States where the data subjects, whose personal data are processed in relation to the offering of goods or services to them, or whose behaviour is monitored, are.


## Topics on this provision

- **Representatives** — https://overview.legal/topics/representatives
  Representatives of controllers not established in the EU
- **Territorial scope (GDPR)** — https://overview.legal/topics/territorial-scope
  When the GDPR applies geographically: establishment in the Union, targeting (offering goods or services), and behavioural monitoring by non-EU controllers (Arti
- **Personal Data** — https://overview.legal/topics/persoonsgegevens
  Information relating to identified or identifiable natural persons

## Cited by (exact-provision citations)

- **Guidelines 3/2018 on the territorial scope of the GDPR (Article 3)** (guidance) — https://overview.legal/posts/38074
- **EDPB-EDPS Joint Opinion 2/2022 on the Proposal of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act)** (guidance) — https://overview.legal/posts/125945
- **If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation** (literature) — https://overview.legal/posts/53843

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-27#par-3 · 2026-08-22