Appointing a GDPR EU Representative is almost always compulsory for corporations residing outside the European Union.

Get your GDPR EU Representative for EUR 7.90 /monthRegister now
Use our free self assessment tool to check whether you meet the criterias.

3
European Supervisory Authorities

Not only can the penalties be severe monetary fines (up to 20M or 4% of annual revenue), the European Supervisory Authorities reserve the right to limit or eliminate the processing of your data files. The highest fine to date was EUR 740,000,000 to Amazon.

Overview of fines and penalties :

2023.01.12 | SPAIN » EUR 3,000

Art. 6 (1) GDPR
Insufficient legal basis for data processing

source

2023.01.12 | ROMANIA » EUR 2,000

Art. 32 (1) b) GDPR, Art. 32 (2) GDPR
Insufficient technical and organisational measures to ensure information security

source

2023.01.09 | LITHUANIA » EUR 6,000

Art. 5 (1) a) GDPR, Art. 9 (1) GDPR, Art. 13 (1), (2) GDPR, Art. 30 (1), (3) GDPR, Art. 35 (1), (3) GDPR
Insufficient legal basis for data processing

source

2023.01.04 | IRELAND » EUR 390,000,000

Art. 5 (1) a) GDPR, Art. 6 (1) GDPR, Art. 12 GDPR, Art. 13 (1) c) GDPR
Non-compliance with general data processing principles

source

2022.12.29 | SPAIN » EUR 24,000

Art. 6 (1) GDPR
Insufficient legal basis for data processing

source

2022.12.22 | ROMANIA » EUR 10,000

Art. 32 (4) GDPR
Insufficient technical and organisational measures to ensure information security

source

SERVICES

Our expertise is in managing requirements under Article 27 of the GDPR

If your organization is located outside the EU but is offering goods or services to individuals in the EU, or monitoring their behavior, and you are processing their personal data, it is highly likely that you need to appoint an EU Representative under Article 27 of the EU General Data Protection Regulation (GDPR).

What is an EU Representative?
  • hold your Article 30 records of data processing activity
  • act on your behalf in relation to data protection matters in the EU
  • act as the first port of call for the local supervisory authorities in relation to compliance action
  • act as a portal for the receipt of requests from individual data subjects in connection with their data protection rights
How we can help
  • We can act as your EU Representative within the EU
  • We are headquartered in Rotterdam, Netherlands
managing requirements under Article 27 of the GDPR

EU GDPR Representative Service

€ 7.90 /month

Billed annually € 94.80

  • EU GDPR Representative (Art 27)
  • Email support
  • Unlimited e-mail correspondence with Data Subjects and Supervisory Authorities
  • Cancel anytime
REGISTER NOW

SELF-ASSESSMENT

Are you obliged to appoint an EU Representative?

Well, the answer is just a few questions away …

Go to free assessment
Free self-assessment tool

FAQ

I don't need a representative because I only do business in a country outside the EU
Beware of your processors or software: Google, Amazon, Facebook, Apple, Microsoft. Processing any data which can identify an individual human being through a GAFAM or EU-based processor or processing them on EU located servers makes the GDPR compliance compulsory.
Can’t I just get this whenever I need it?
It’s like saying : “Can I drive without car insurance and get it if I have an accident?”

You need that insurance now and you can get it simply and easily at a very low price. Penalties for non GDPR-compliance are severe.

I have set up a GDPR privacy notice on my website, changed my opt-in procedures and sent a GDPR notification to all my customers, isn't that enough?
GDPR compliance is complex, and it’s likely that many companies don’t comply at 100%. Although, the most important is to minimize any risk with best effort.

Not having a EU Representative is a serious offense and any supervisory authority would fix a severe penalty in case of complaint.

I don’t need to be compliant, I only use paper to process personal data

Wrong : as long as personal data from EU residents are processed or stored, whatever the support (electronic, paper, ..), you must comply with GDPR.

What makes an EU representative eligible?
The representative must be incorporated in a country of the EU.
When do I need a DPO and when do I need a representative?
As representative is compulsory once your company is not located in the EU, DPO is only compulsory under certain circumstances, based on sensitive data and large scale processing (Art. 37 GDPR).

Representative and DPO positions cannot be performed by the same entity.

We have their confidence

ALTIMUM SA - Switzerland
NETSQUAD SA - Switzerland