Your company is not established in the European Union

 

It offers goods or services to individuals in the EU?

or

It monitors behaviour of individuals within the EU?

or

It processes sensitive data of individuals in the EU on a large scale?

or

It processes personal data of individuals in the EU with likelihood to result in a risk to the rights and freedoms?

 

If any above applies, your company is obliged to appoint a Representative

Get your GDPR EU Representative for EUR 20 / month Register now

European Supervisory Authorities

Not only can the penalties be financial fines (up to 20M or 4% of annual revenue), the European Supervisory Authorities may also command to limit or eliminate any personal data processing activity.

 

Not appointing an EU Representative is also an offence under GDPR which leads to severe penalties, such as “Locatefamily.com” which was fined EUR 525,000 by the Dutch Supervisory Authority

Overview of fines and penalties :

2023.01.12 | SPAIN » EUR 3,000

Art. 6 (1) GDPR
Insufficient legal basis for data processing

2023.01.12 | ROMANIA » EUR 2,000

Art. 32 (1) b) GDPR, Art. 32 (2) GDPR
Insufficient technical and organisational measures to ensure information security

2023.01.09 | LITHUANIA » EUR 6,000

Art. 5 (1) a) GDPR, Art. 9 (1) GDPR, Art. 13 (1), (2) GDPR, Art. 30 (1), (3) GDPR, Art. 35 (1), (3) GDPR
Insufficient legal basis for data processing

2023.01.04 | IRELAND » EUR 390,000,000

Art. 5 (1) a) GDPR, Art. 6 (1) GDPR, Art. 12 GDPR, Art. 13 (1) c) GDPR
Non-compliance with general data processing principles

2022.12.29 | SPAIN » EUR 24,000

Art. 6 (1) GDPR
Insufficient legal basis for data processing

2022.12.22 | ROMANIA » EUR 10,000

Art. 32 (4) GDPR
Insufficient technical and organisational measures to ensure information security

SERVICES

Our expertise is in managing requirements under Article 27 of the GDPR

If your organization is located outside the EU but is offering goods or services to individuals in the EU, or monitoring their behavior, and you are processing their personal data, it is highly likely that you need to appoint an EU Representative under Article 27 of the EU General Data Protection Regulation (GDPR).

What is an EU Representative?
  • hold your Article 30 records of data processing activity
  • act on your behalf in relation to data protection matters in the EU
  • act as the first contact for supervisory authorities
  • act as the first contact for data subjects
How we can help
  • We can act as your EU Representative
  • We are headquartered in Rotterdam, Netherlands
managing requirements under Article 27 of the GDPR

EU GDPR Representative Service

€ 20 / month

They trust us

ALTIMUM SA - Switzerland
NETSQUAD SA - Switzerland