Why does the GDPR require an EU representative in accordance with Art. 27 GDPR?

European data protection law aims to ensure a uniform level of protection for personal data within the EU and thus to take into account the protection of this data as enshrined in fundamental rights. In order to ensure this protection in an increasingly digitalized world, the General Data Protection Regulation (GDPR) introduces the so-called market location principle.  

This means that non-European organisations may also process personal data of EU citizens—provided that they offer their products or services in the EU or observe the behavior of data subjects within the EU. In these cases, however, the processing falls within the scope of the GDPR. Accordingly, affected companies may have to appoint a representative in the EU (Art. 27 GDPR).  

Note: This information does not constitute individual legal advice.