Article 27 versus branch office — what actually changes for GDPR accountability, market entry, internal ownership and how privacy requests reach the business.