Service decision and evidence guide

Employee travel and overseas payroll: separate HR processing from an EU customer offer

Reimbursing employees on an EU business trip is not automatically an offer of services under Article 3(2)(a). The EDPB also distinguishes overseas payroll for EU-resident staff from a customer offer. Assess the actual HR purpose, any EU establishment and other monitoring separately; these examples are not a blanket GDPR exemption for employers.

Evidence retrieved 2026-10-07. Source versions and topic-specific limits are listed below.

Sourced criteria · EU · GDPR

What changes the service scope?

Decision or taskWhat the source describesWhat to prepare
Temporary travel expensesThe business-trip example concerns expense reimbursement and allowances connected with employment duties, rather than an offer of goods or services to the employees. [1] [2]Compare the stated example/criterion with the evidence tasks below; retain any factual differences.
Payroll for EU-resident staffThe overseas payroll example likewise distinguishes salary administration from an offer under Article 3(2)(a). Residence alone does not answer that offering question. [3] [4]Compare the stated example/criterion with the evidence tasks below; retain any factual differences.
Other routes remain to be checkedArticle 3 contains separate establishment and behaviour-monitoring routes. An HR-purpose conclusion on Article 3(2)(a) does not decide every other activity. [5]Compare the stated example/criterion with the evidence tasks below; retain any factual differences.

The EDPB document is Guidelines 3/2018, version 2.1, adopted 12 November 2019. Its worked examples are guidance and dated assumptions, not a new law or a conclusion about your organisation. EU scope is assessed here; UK and Swiss rules require separate evidence. Novel or disputed scope/role interpretations need specialist legal review.

Prepare the evidence and engagement scope

Use this checklist to gather your business or product details before speaking with a specialist. The items below explain what to record and suggest useful supporting documents. You can add your own answers in the editable project brief.

  1. Split HR processing purposes

    Separate payroll and expense administration from recruitment, employee tracking and any customer-facing offer; avoid one conclusion for unrelated purposes.

    Useful evidence: A processing-purpose and responsible-entity inventory.

  2. Record employment and establishment facts

    Document employing entity, relevant offices, trip/residence locations and how the processing relates to each establishment.

    Useful evidence: An entity/location matrix and employment-process description.

  3. Commission the remaining checks

    Ask which Article 3 routes and local employment/privacy rules still need review; quote representative appointment only after its own applicability assessment.

    Useful evidence: A scope assessment and explicitly separate work packages.

Work packages and dependencies

Questions for providers

Sources and data dates

Read the official document in context. The audit details identify the precise locators and preserved versions used for this page.

EDPB territorial-scope guidance — PDF page 16 ↗

Guidelines 3/2018 version 2.1; 2020-01-07 formatting change · retrieved 2026-10-07

Audit details: precise locators and snapshot identifiers

Source key D17 · snapshot d6910de864b8bbbdd7ed11e7509391a21ac9b627c8745dde87e8acd7c63b4862

  • [1] PDF page 16 · record 21379547ae301e79bf2983ffdb547ee6d4884578903434299feb9248d8efc4a7
  • [2] PDF page 17 · record cbc814429cd082497982efb0b237589e049c160d9fc0d4069b0ed35b1628b7b5
  • [3] PDF page 18 · record 9e1ef793ac654df92442ac399dac4985ad6b715a76090e786c1995bdd8e670a0
  • [4] PDF page 19 · record d591a84cddeb9cc8271384ebe4ac5d4c592d71fc167283bc022db9659e452762

European Union — GDPR (Regulation (EU) 2016/679) ↗

Consolidated text dated 2016-05-04 · retrieved 2026-10-06

Audit details: precise locators and snapshot identifiers

Source key D05 · snapshot 149156a8f8dfc90bead21c89c32eb84f92b7414602c3e00e058755810b48ef8a

  • [5] #art_3 · record e971d61ba2966f81cde250e8814a8e3d60e16da6212a0f1fd180e1dd9869819d
  • [6] #art_27 · record 6b75ebac1e370f3020c6d5dc7f0117ed27d1bf4a4c7c47b155b12f0c3984a10e

Prepare an editable project brief

Confirm the facts, scope and contact preference before sharing your project. Preparing this page sends no provider outreach.

Choose work packages to discuss

Compare GDPR Article 27 EU/UK Representative