EU Representative service under GDPR Article 27

For non-EU companies processing EU personal data. From €100/month.

If your company is based outside the EU but offers goods or services to individuals in the EU or monitors their behavior, you likely need an EU Representative under GDPR Article 27. We provide this as a standalone service or alongside our DPO services.

Key takeaways

  • An EU Representative is required under GDPR Article 27 for most non-EU companies processing EU personal data (subject to limited exceptions)

  • This is a separate function from a DPO. We keep the two operationally separate to avoid conflicts.

  • Standalone EU Representative service from €100/month. Combined with DPO services from €2,000/month.

  • Setup takes 1-2 weeks.

What is an EU Representative?

An EU Representative is a designated individual or organization established in one of the EU Member States where the relevant data subjects are located, acting as a local contact point for supervisory authorities and data subjects on behalf of a non-EU company. This is required under GDPR Article 27 for companies that:

  • Are based outside the EU, AND

  • Offer goods or services to individuals in the EU, OR monitor the behavior of individuals in the EU

There are limited exceptions, including for occasional processing that doesn't include large-scale special category data and is unlikely to result in risk to individuals.

The EU Representative is NOT the same as a DPO. They serve different functions and should be kept operationally separate.

What we handle

  • EU Representative appointment and designation

  • Act as point of contact for EU supervisory authorities on your behalf

  • Act as point of contact for EU data subjects on your behalf

  • Hold and make available the Article 30 records you provide, where applicable

  • Coordinate with your internal team on regulatory inquiries

  • Ongoing availability for supervisory authority and data subject communications

How it works

Week 1: We assess your obligation, designate the EU Representative, and prepare the appointment documentation.

Week 2: We update your privacy policy to include the EU Representative's contact details (required under GDPR) and confirm the designation.

Ongoing: We act as the designated contact point, handle inquiries, and coordinate with your team as needed.

Pricing

Standalone EU Representative: From €100/month. Covers the designation, contact point function, and ongoing availability.

EU Representative + DPO services: If you also need a DPO, the EU Representative function is included in our DPO Essentials (from €2,000/month) and DPO Premium (from €5,000/month) tiers, provided through operationally separate functions.

EU Representative + Advisory: For companies that need an EU Rep but only lighter-touch privacy support, we can combine the EU Representative designation with our Advisory tier (from €500/month).

FAQ

Do I need an EU Representative? If your company is based outside the EU and offers goods or services to individuals in the EU or monitors their behavior, you likely need one under GDPR Article 27. There are limited exceptions for occasional, low-risk processing.

Can the EU Representative and DPO be the same person? We keep these functions operationally separate to avoid conflicts and preserve DPO independence. We provide both services through our firm, but with separate designated individuals for each role.

What happens if I don't appoint an EU Representative? Failure to appoint an EU Representative when required is itself a GDPR infringement. It also creates practical problems: supervisory authorities may have no way to contact you, which can escalate issues unnecessarily.

How quickly can you set this up? Most EU Representative appointments are completed within 1-2 weeks.

Do I need an EU Representative if I have an EU subsidiary? If your organization is established in the EU, Article 27 may not apply. However, the existence of an EU subsidiary alone does not always settle that question. You may still need a DPO depending on your processing activities. See Do I Need a DPO?.

Can I use a different provider for EU Rep and DPO? Yes. Some companies use separate providers for each function. This naturally ensures operational separation.

This page is general information, not legal advice. Exact obligations depend on your specific situation and jurisdictions.

Related pages