Article 27
What is a GDPR representative? Article 27 explained
What a GDPR representative is, who must appoint one under Article 27, what it does and does not do, how to appoint one, and what it costs.
12 min read · Updated
Resources
Plain-language guides to EU and UK representation under GDPR, the DSA, the AI Act and the Data Act.
Who needs one
Does a Shopify store shipping to the EU need a GDPR representative?
If your store outside the EU sells to people there, or tracks them for ads, you likely need an EU representative. What counts, and how to add one.
10 min read · Updated
Who needs one
I built an app with AI. Do I need a GDPR representative?
If you offer your Lovable, Bolt or Cursor app to people in the EU, or track them, you likely need an EU representative, even as a solo dev with a free app.
10 min read · Updated
DSA, AI Act & Data Act
Who needs an AI Act authorised representative, and what does one do?
Non-EU providers of high-risk AI systems and most general-purpose AI models need an EU representative. Who is caught, what it does, and when it applies.
10 min read · Updated
Who needs one
Does a mobile app with EU users need a GDPR representative?
If your app is offered to people in the EU or its SDKs track them, Article 27 GDPR usually applies, even to free apps and solo developers.
10 min read · Updated
Who needs one
Do US companies need an EU GDPR representative?
Most US companies with EU customers or users must appoint one under Article 27. When it applies, the narrow exemption, and what happens if you skip it.
8 min read · Updated