Article 27 UK GDPR · China

UK representative for Chinese companies

Chinese sellers reach British consumers mostly through platforms, and platforms have become the enforcers of this rule. Long before the ICO writes to anyone, a compliance field appears in the seller account asking for a representative established in the United Kingdom, and listings stop appearing when it is left empty.

PIPL and the UK GDPR ask different questions

The Personal Information Protection Law governs processing in China and imposes its own requirements, including a domestic representative for foreign handlers. It is a mirror image of Article 27 rather than a substitute for it: each regime asks a company outside its territory to name someone inside. Complying with PIPL says nothing to the ICO, and a Chinese entity named under PIPL is not established in Britain.

The platform is usually the first to ask

Marketplaces operating in the United Kingdom carry their own liability, and they manage it by pushing the requirement onto sellers. The field is validated: an address in China or in the EEA is commonly refused outright. Sellers discover the rule as a countdown in a seller dashboard rather than as a letter, and the cost of not answering it is measured in suppressed listings within days.

No adequacy finding, so transfers need a mechanism too

The United Kingdom has not recognised China as adequate. Personal data moving from Britain to a Chinese company generally requires the IDTA or the addendum to the standard clauses. That is separate from representation and it is the second thing a British business buyer asks about, usually in the same email.

What the designation proves, and to whom

It names REP27 LTD, company number 17385889, at Mildenhall in Suffolk, and it carries a code prefixed UK27 that resolves on a public register. A platform checking a seller, or a British retailer checking a supplier, verifies the code rather than reading the letter. A document without a resolvable code answers a question nobody asked.

What the seller account field is actually asking

It asks for a representative under Article 27 of the UK GDPR: an entity established in the United Kingdom, named in writing, reachable by data subjects and by the ICO. Some platforms ask separately for a UK responsible person under product safety rules, which is a different role for physical goods. Filling one field with the other is the most common reason a submission is rejected twice.

Two regimes, opposite directions

When the listing goes quiet

The sequence is predictable. A deadline appears in the seller account. It passes. Listings stop surfacing in British search results, then stop being buyable, and the account shows a compliance hold rather than an explanation. Restoring it requires a designation that resolves publicly, which is why the fastest route is to have the code before the deadline rather than after.

Questions from Chinese companies

Companies elsewhere, same obligation

What changes from one country to the next is not the rule but the route into it.