Directive 2016/1148 (EU), which has been transposed by Belgian law in 2019, requires that digital service providers that are not established in the EU but offer services to EU operators of essential services designate a representative in the Union. Under Article 27 of the GDPR, representatives of controllers or processors not established in the EU must be established in one of the Member States.