GDPR Local &
Sign in
Sign up free

GDPR Article 27 · UK GDPR Article 27 · FADP Article 14

Vanta flagged it. Clear it today.

If you sell into the EU or UK without an establishment there, the law says you must appoint a representative in writing. Sign up free, and download your signed Written Agreement in minutes.

10% off for Vanta customers, applied automatically at checkout. No code needed.
Create your account now
No credit card
Written Agreement in minutes
Offices in the UK, EU and Switzerland

Requirement check

Which representatives do you need?

Two questions, no email required. Answers stay in your browser.

Q1Where is your company legally established? Select all that apply
In the EU
In the UK
In Switzerland
Elsewhere (i.e. United States)
Q2Do you offer goods or services to, or monitor the behaviour of, people in the EU, UK or Switzerland? Select all that apply
UE
Reino Unido
Suiza

Partner pricing

Priced by company size, discounted
for Vanta

Pick your headcount and billing period. The Vanta rate is already applied.

Tamaño de la empresa:

GDPR Article 27 EU/UK
Representative

Configuración rápida, acceso inmediato a tu acuerdo por escrito y a nuestro servicio de representante para el RGPD de la UE

£ 89 /mo £ 99 /mo
Comprar ahora
  • Su agente de protección de datos en la UE y el Reino Unido
  • Ayudarle a cumplir sus obligaciones legales
  • Expertos que le ayudarán a hacer frente a los SAR, los RTE y las violaciones de datos
  • Actuar como primer punto de contacto para cualquier consulta del regulador.
  • Auditoría inicial gratuita de conformidad con el artículo 27 para ayudarle a mantener su seguridad

FADP Article 14 Swiss
Representative

Es obligatorio si te encuentras fuera de Suiza y tratas datos u ofreces servicios a ciudadanos suizos.

£ 89 /mo £ 99 /mo
Comprar ahora
  • Apoyo en materia de cumplimiento desde nuestra oficina en Suiza
  • Acuerdo escrito conforme a la ley FADP
  • Auditoría gratuita de la política de privacidad
  • Enlace con el regulador local en su nombre

Extend your compliance with expert-led services

*Los precios mostrados en las diferentes monedas son orientativos y se actualizan una vez al día. Los pagos finales se procesarán en libras esterlinas al registrarse y acceder al portal.

From Sign up to Evidence

Five steps, and the first two
take about five minutes

The order matters here, because your Written Agreement lands on day 1.

The five steps, on a time axis Steps one and two both happen on day one in about five minutes, and step two issues the signed Written Agreement that clears your Vanta control. Steps three, four and five follow afterwards at your own pace and do not hold up the evidence.

Step 01 of 05

About 2 minutes

Create your account

A few details about your company and the jurisdictions you need. No credit card, and nothing to install.

The evidence arrives at step 2, not at the end, so the compliance work that follows improves your position without holding up the paperwork your auditor is waiting for.

Why us

A real presence in every
jurisdiction we represent you in

A representative has to be established where your data subjects are. Ours are,
with staffed offices and registered addresses in each.

Working with GDPRLocal has been a game-changer for MBN Solutions. Their professionalism and expertise ensure our data is safe. They offer first-class service and a great customer experience. MBN Solutions highly recommends GDPRLocal for any business needing GDPR solutions.

Fiona Gillies Operations Manager of MBN Solutions 

Before you ask

The questions Vanta
customers actually ask us

No. You remain the controller or processor and stay responsible for your own compliance. Our role is to be the point of contact in the EU or UK that regulators and individuals can reach, to maintain a record of your processing activities, and to support you when something is raised.
Usually yes. Since Brexit the UK is outside the EU, so a UK-only company that offers goods or services to people in the EU, or monitors their behaviour, generally needs an EU representative under EU GDPR. It works the other way too: an EU-established company targeting the UK generally needs a UK representative.
There is an exemption, but it is narrow and it is not about company size. It applies where your processing is occasional, does not include large-scale processing of special category data or criminal offence data, and is unlikely to result in a risk to people's rights and freedoms. Most businesses with EU customers do not qualify, because their processing is ongoing rather than occasional.
Failure to designate a representative is an infringement of the controller and processor obligations, which carries administrative fines of up to 10 million euro or 2% of total worldwide annual turnover, whichever is higher. It is also increasingly picked up during security and privacy reviews by your own customers.
Your Written Agreement is available to download from the portal as soon as you have completed signup, so you can attach it as evidence the same day. The compliance audit that follows is about improving your position, not a condition of the appointment.
It is applied automatically at checkout when you arrive through this page, so there is no code to enter. The link carries your partner reference, which is also how we know to give you the partner rate on renewal.
Yes. The revised Swiss Federal Act on Data Protection has its own representative requirement under Article 14 for organisations outside Switzerland that process data on people there. It is a separate appointment from GDPR, and it is available as its own subscription.