EU GDPR Article 27 Representative service

If you require a Representative in the EU, EEA, UK and/or Switzerland, to meet the requirements of the data protection laws in those jurisdictions (Article 27 of EU and UK GDPR, and Article 14 of the Swiss Federal Act on Data Protection), DataRep can ensure you meet the best practice standards for this obligation.

For more information about GDPR generally, and how the Representative obligation arises and operates, please visit this page.

As the first point of contact when your customers (or the Data Protection Authorities) have questions about your data processing activities, we provide them with a frictionless data request experience through whichever route they find most convenient.

Your organisation works hard to be compliant with data protection laws and the privacy expectations of your customers – make clear that you’re meeting those expectations by appointing a Representative which effortlessly helps them access their data protection rights.

If you appoint DataRep to be your Data Protection Representative, you will receive these benefits:

Local presence in all 27 EU member states, plus UK, Switzerland & EEA

DataRep has contact locations in all 27 EU member states, two EEA member states (Norway and Iceland), the UK and Switzerland, giving your business an address for data requests in each of those countries.

DataRep considers providing a contact location across all relevant countries an essential part of the Data Protection Representative service, and your customers in Europe will expect this too – most Representatives only offer contact locations in a few EU member states, which may not meet good practice requirements.*

Free GDPR Representative consultation

We can provide you with a free consultation where we will advise you whether you are required by EU or UK GDPR to appoint a Data Protection Representative, or the equivalent Swiss obligation, based on the circumstances of your organisation and its data processing operations.

Next-working-day service level

The obligation to respond to data requests is time-limited by legislation, so we ensure our clients have the maximum time to prepare their response by acknowledging and forwarding the requests we receive no later than the working day after they were received.

Unlimited communications

We appreciate our clients can’t predict how many data requests they may receive, so we allow unlimited communications within each of our packages, subject to our Reasonable Use Policy.

Switzerland Representative cover included

Changes to the Federal Act on Data Protection (FADP) in Switzerland with effect from 1st September 2023 require the appointment of a Swiss Representative for data controllers outside of Switzerland. This service is either included or available at reduced rate for our GDPR Representative clients which need this, delivered from our Zurich contact location.

UK Representative cover after Brexit

At the end of the Brexit transition period (31 December 2020) our clients with UK data subjects will also need a UK Representative – our UK contact location is operated by our sister company, DataRep UK, and our appointment automatically includes a UK Representative appointment from that date at no extra cost.

Renewal usage discount

Most of our clients see low levels of communications; we reward their good practice with discounts at the renewal of their appointment:
Communications received Renewal discount**
Fewer than one request per 5,000 data subjects
50%
Fewer than one request per 2,000 data subjects
25%
Minimum renewal discount
10%

Simplified data requests for your customers

As well as our email and postal addresses, DataRep make life easier for your customers by offering a landing page specifically for notifying data requests, available for review here.

For clients with base appointment fee of over €1,500 (or otherwise for an additional €50), we can prepare a bespoke landing page for your data subjects with your own branding, reassuring your customers that we are your Representative (example page here).

Active inquiry management

When we receive a relevant communication electronically from one of your customers, a Data Protection Authority or anyone else, DataRep will issue them an acknowledgement confirming their request is being actioned.

When we pass these queries onto our clients, we also provide general guidance on what actions you should be taking to respond to that inquiry, and the timescales in which to do so.

This is all achieved within our next-working-day service level.

Assistance and guidance

When you receive a subject access request or a question from a Data Protection Authority, or if you are unfortunate enough to suffer a data breach, we can guide you with how to respond, when and to whom. When the matters are complex, we have consultants available who can provide specific and detailed advice***.

Article 30 record retention​

The Data Protection Representative is required by GDPR (and the Swiss equivalent) to hold a copy of their client’s Record of Processing Activities (ROPA), and make them available for review by the local Data Protection Authorities.

We hold the ROPAs of our clients securely in preparation for such a request, and will let you know if that request is received. We do not charge to update the ROPAs we hold.

Translation and language services

Because the people whose data you control or process are permitted to contact you in any of the EEA’s 24 official languages, we acknowledge the requests we receive in the sender’s language, use AI translation to provide you an English-language translation and, if requested, we can arrange translation services for your response to them***

Local law representation

As part of DataRep’s Data Protection Representative service, we also provide Representation under any variation to the GDPR Representative obligation which arises under local national law in any EU/EEA member state.

Pricing for the Data Protection Representative service is based on the numbers of data subjects in the relevant jurisdictions, and whether special category data is processed. Please see our SHOP for the appointment fees which would be applicable to your organisation.

Please note that having a Data Protection Representative is likely to be one of many obligations placed on your business under GDPR and other data protection legislation; if you require advice on how to be complaint with other aspects of the GDPR legal obligations, please contact us at compliance@datarep.com.

* See European Data Protection Board guidance 03/2018
** Subject to minimum annual appointment fee of €100
*** Additional terms and costs may apply

The dpr logo on a white background.
Datarep logo with an orange and blue background.

Thank you for visiting DPR Group’s website!

We are still the same company, offering the most-compliant EU Representative service in the privacy marketplace, but we now have an exciting new brand!

Although we now operate as DataRep, all our DPR Group clients continue to be represented by us, to enable their GDPR compliance.

If you have any questions about the change, please don’t hesitate to contact us here!

We see you’re leaving our site

Can we help you further?

 If you have a question or you’d like more information, please leave your email address and someone will contact you: