# Representatives of controllers or processors not established in the Union 27(5) — GDPR — provision context

> Focused context for a single provision (27(5)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-27#par-5
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Representatives of controllers or processors not established in the Union** (GDPR, full article: https://overview.legal/laws/gdpr/art-27).

## Provision text

### 27(5)

The designation of a representative by the controller or processor shall be without prejudice to legal actions which could be initiated against the controller or the processor themselves.


## Topics on this provision

- **Representatives** — https://overview.legal/topics/representatives
  Representatives of controllers not established in the EU
- **Processors** — https://overview.legal/topics/processors
  Entities that process data on behalf of controllers
- **Controllers** — https://overview.legal/topics/controllers
  Entities that determine purposes and means of processing

## Cited by (exact-provision citations)

- **Guidelines 9/2022 on personal data breach notification under GDPR** (guidance) — https://overview.legal/posts/38058
- **Guidelines 3/2018 on the territorial scope of the GDPR (Article 3)** (guidance) — https://overview.legal/posts/38074
- **Guidelines 9/2022 on personal data breach notification under GDPR** §138 (guidance, EDPB) — https://overview.legal/posts/38058
- **Guidelines 9/2022 on personal data breach notification under GDPR** §76 (guidance, EDPB) — https://overview.legal/posts/38058
- **If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation** (literature) — https://overview.legal/posts/53843

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-27#par-5 · 2026-08-22