Data · October 2026

Article 27 Index: how many non-EU websites name an EU representative?

We read the public privacy notices of 1,500 of the most visited websites: the top sites of 20 countries outside the European Union and the top generic domains (.com, .io and others). 4% of the notices we could read name a representative in the Union under Article 27 GDPR.

1,500Websites checked

543Privacy notices read

4%Name an EU representative

23%Only an EU address

73%Neither

Share of privacy notices that name an EU representative, by country

United Kingdom14% · 4/28
Global (.com, .io, .ai, .co, .app, .net)11% · 12/114
Switzerland9% · 3/35
United States7% · 1/14
Japan4% · 1/26
Canada0% · 0/34
New Zealand0% · 0/34
South Korea0% · 0/33
United Arab Emirates0% · 0/28
Mexico0% · 0/27
Australia0% · 0/25
Brazil0% · 0/24
India0% · 0/21
South Africa0% · 0/21
Argentina0% · 0/19
Singapore0% · 0/17
Hong Kong SAR China0% · 0/15
China0% · 0/11

Country or domain group · Notices read · …

Country or domain group	Notices read	Name a representative	Only an EU address	Neither
United Kingdom	28	4 (14%)	12 (43%)	12 (43%)
Global (.com, .io, .ai, .co, .app, .net)	114	12 (11%)	54 (47%)	48 (42%)
Switzerland	35	3 (9%)	16 (46%)	16 (46%)
United States	14	1 (7%)	2 (14%)	11 (79%)
Japan	26	1 (4%)	0 (0%)	25 (96%)
Canada	34	0 (0%)	3 (9%)	31 (91%)
New Zealand	34	0 (0%)	5 (15%)	29 (85%)
South Korea	33	0 (0%)	1 (3%)	32 (97%)
United Arab Emirates	28	0 (0%)	4 (14%)	24 (86%)
Mexico	27	0 (0%)	5 (19%)	22 (81%)
Australia	25	0 (0%)	5 (20%)	20 (80%)
Brazil	24	0 (0%)	1 (4%)	23 (96%)
India	21	0 (0%)	4 (19%)	17 (81%)
South Africa	21	0 (0%)	5 (24%)	16 (76%)
Argentina	19	0 (0%)	1 (5%)	18 (95%)
Singapore	17	0 (0%)	0 (0%)	17 (100%)
Hong Kong SAR China	15	0 (0%)	3 (20%)	12 (80%)
China	11	0 (0%)	0 (0%)	11 (100%)

Check a website now

Method

Sample: the 60 most visited websites for each country-code domain (20 countries outside the EU and EEA) and the 300 most visited generic domains, from the public Tranco list of top sites. Domains reserved to public bodies and universities (such as .gov, .edu and .ac) are excluded.
Reading: the same engine as our free check. It fetches the privacy notice (or follows the privacy link from the home page) and looks for a named representative in eight languages.
Outcomes: a representative is named; the notice gives only an address in the EU (often an EU subsidiary, which can make a representative unnecessary); or neither. Websites whose notice could not be read are counted separately and left out of the percentages.
No company names are published: only totals. Websites are read with a user agent that identifies us; pages built with JavaScript get a second reading in a real browser.

What the Index does not say

Not every website in the sample needs a representative. Article 27 applies to organisations without an establishment in the Union that offer goods or services to people in the Union or monitor their behaviour. A missing name is therefore a signal to look closer, not a finding of a breach. The reading is automated: it is an indication, not a legal opinion.

How to cite

Free to use and republish under CC BY 4.0, with a link to this page.

REP27 (Europe Services SE), Article 27 Index, October 2026. https://gdprrepresentative.com/article-27-index/
<a href="https://gdprrepresentative.com/article-27-index/">REP27 Article 27 Index</a> (October 2026)

Next update: every quarter. Is your company in scope? Free check →