Who needs an EU representative under GDPR Article 27? Scope tests, exceptions, what the role covers, DPO differences and how to assess exposure.