I do not really understand the EU's requirement to have a GDPR representative located in the EU for a data controller and/or processor located outside the EU.
From the EU's point of view they obviously want to have someone who cannot avoid interaction with them, but since the representative is more or less not reliable for misbehaviour of the data controller outside the EU, there seems not much difference in what the EU can do with our without such a representative if the outside controller is not responsive to data requests or violates GDPR.
What am I missing here?
This is different to the question what happens if a data contoller ouside EU ignors and/or violates GDPR, which is discussed here In which jurisdictions outside the EU can the GDPR be enforced?
