Limitation of the obligation laid down in the Article 27, paragraph 1
The obligation laid down in paragraph 1 of this Article shall not apply to: (a) processing which is occasional, does not include, on a large scale, processing of special categories of data as referred to in Article 9(1) or processing of personal data relating to criminal convictions and offences referred to in Article 10, and is unlikely to result in a risk to the rights and freedoms of natural persons, taking into account the nature, context, scope and purposes of the processing; or (b) a public authority or body.
Chapter IV, Section 1, Article 27, Paragraph 2
Regulation's subject matter
Representatives of controllers or processors not established in the Union (Article 27, Section 1, Chapter IV)
Controller not established in the EU Processor not established in the EU Public authority outside the EU Public body outside the EU