Article 27 - Representatives of controllers or processors not established in the Union

Article 27 obliges controllers or processors that are not established in the EU to designate a legal representative within the Union. The representative must be established in the member state where the controller's or processor's activities are concerned and serves as the contact point for supervisory authorities and data subjects, ensuring compliance with GDPR obligations.