GDPR Article 27 and GPSR Article 16 are two separate legal requirements, and one does not cover the other.
GDPR Article 27 applies if your company processes personal data of EU residents without an EU establishment. It requires a written designation of a representative in the EU who handles data protection enquiries from supervisory authorities and data subjects.
GPSR Article 16 (Regulation (EU) 2023/988) applies if you place consumer products on the EU market. It requires a responsible person — established in the EU — whose name and address appear on the product or its packaging.
The two roles can be held by the same provider. At REP27, the Multi plan covers both in a single annual fee, with a dedicated mailbox included.
If you only sell software or services and collect no personal data, you may not need either. If you sell physical products and run a website with a cookie banner, you likely need both.
When in doubt, read the obligation that applies to you directly — GDPR Article 27 and GPSR Article 16 are publicly available in the EUR-Lex official journal.


