GDPR Compliance
Protect personal data across the EU, UK and Switzerland
GDPR is the EU law governing how organisations collect, use, and protect the personal data of people in the EU and UK. Non-compliance can bring fines of up to €20 million or 4% of global annual turnover, whichever is higher.
What is GDPR?
Who needs to comply with GDPR?
that processes the personal data of individuals located in the EU
or UK, whether it's offering goods or services to them or monitoring
their behaviour.
Non-EU/UK companies without an establishment in the territory
typically need to appoint an Article 27 representative.
What are the key requirements
of GDPR?
A documented lawful basis for every processing activity, with valid consent where required
Honouring data subject rights: access, rectification, erasure, restriction, portability, and objection
Appointing a Data Protection Officer (DPO) where mandated
Appointing an EU/UK Article 27 representative if you have no local establishment
Reporting personal data breaches to the relevant authority within 72 hours
Conducting Data Protection Impact Assessments (DPIAs) for high-risk processing
Maintaining Records of Processing Activities (RoPA) and valid data transfer mechanisms
UK companies must appoint an EU rep.
EU companies must appoint a UK rep.
Non EU/UK companies must appoint both a UK and an EU rep.
What are the penalties for GDPR non-compliance?
Non-compliance can result in fines of up to €20 million or 4% of global annual turnover, whichever is higher - plus reputational damage and loss of customer trust.
Contáctanos€20M
Maximum fixed fine4%
Global annual turnover72h
Breach reportingHow does GDPRLocal help with GDPR?
GDPRLocal supports you with everything GDPR requires, end to end: Article 27 EU/UK Representative services, outsourced DPO support, Subject Access Request handling, breach management, DPIAs, RoPA documentation, and ongoing advisory - so you can meet every GDPR obligation without building an in-house privacy team.
Empezar gratis