GDPR Local &
Sign in
Sign up free

GDPR Article 27 · UK GDPR Article 27 · FADP Article 14

Vanta flagged it. Clear it today.

If you sell into the EU or UK without an establishment there, the law says you must appoint a representative in writing. Sign up free, and download your signed Written Agreement in minutes.

10% off for Vanta customers, applied automatically at checkout. No code needed.
Create your account now
No credit card
Written Agreement in minutes
Offices in the UK, EU and Switzerland

Requirement check

Which representatives do you need?

Two questions, no email required. Answers stay in your browser.

Q1Where is your company legally established? Select all that apply
In the EU
In the UK
In Switzerland
Elsewhere (i.e. United States)
Q2Do you offer goods or services to, or monitor the behaviour of, people in the EU, UK or Switzerland? Select all that apply
EU
UK
Switzerland

Partner pricing

Priced by company size, discounted
for Vanta

Pick your headcount and billing period. The Vanta rate is already applied.

Company size:

GDPR Article 27 EU/UK
Representative

Fast setup, instant access to your Written Agreement and our EU GDPR Rep service

£ 89 /mo £ 99 /mo
Buy now
  • Your Data Protection agent in EU and UK
  • Help ensure you meet your legal obligations
  • Experts to help you deal with SARs, RTEs, and Data Breaches
  • Act as your first point of contact for any Regulator enquiries
  • Free initial Article 27 compliance audit to help keep you safe

FADP Article 14 Swiss
Representative

Required if you’re outside Switzerland and handle data or offer services to Swiss citizens.

£ 89 /mo £ 99 /mo
Buy now
  • Compliance support from our office in Switzerland
  • Written Agreement as required under FADP law
  • Free Privacy Policy audit
  • Liaison with the local Regulator on your behalf

Extend your compliance with expert-led services

*Prices displayed in different currencies are for indicative purposes only and are updated once per day. Final payments will be processed in British Pounds upon signing up and accessing the portal.

From Sign up to Evidence

Five steps, and the first two
take about five minutes

The order matters here, because your Written Agreement lands on day 1.

The five steps, on a time axis Steps one and two both happen on day one in about five minutes, and step two issues the signed Written Agreement that clears your Vanta control. Steps three, four and five follow afterwards at your own pace and do not hold up the evidence.

Step 01 of 05

About 2 minutes

Create your account

A few details about your company and the jurisdictions you need. No credit card, and nothing to install.

The evidence arrives at step 2, not at the end, so the compliance work that follows improves your position without holding up the paperwork your auditor is waiting for.

Why us

A real presence in every
jurisdiction we represent you in

A representative has to be established where your data subjects are. Ours are,
with staffed offices and registered addresses in each.

Working with GDPRLocal has been a game-changer for MBN Solutions. Their professionalism and expertise ensure our data is safe. They offer first-class service and a great customer experience. MBN Solutions highly recommends GDPRLocal for any business needing GDPR solutions.

Fiona Gillies Operations Manager of MBN Solutions 

Before you ask

The questions Vanta
customers actually ask us

No. You remain the controller or processor and stay responsible for your own compliance. Our role is to be the point of contact in the EU or UK that regulators and individuals can reach, to maintain a record of your processing activities, and to support you when something is raised.
Usually yes. Since Brexit the UK is outside the EU, so a UK-only company that offers goods or services to people in the EU, or monitors their behaviour, generally needs an EU representative under EU GDPR. It works the other way too: an EU-established company targeting the UK generally needs a UK representative.
There is an exemption, but it is narrow and it is not about company size. It applies where your processing is occasional, does not include large-scale processing of special category data or criminal offence data, and is unlikely to result in a risk to people's rights and freedoms. Most businesses with EU customers do not qualify, because their processing is ongoing rather than occasional.
Failure to designate a representative is an infringement of the controller and processor obligations, which carries administrative fines of up to 10 million euro or 2% of total worldwide annual turnover, whichever is higher. It is also increasingly picked up during security and privacy reviews by your own customers.
Your Written Agreement is available to download from the portal as soon as you have completed signup, so you can attach it as evidence the same day. The compliance audit that follows is about improving your position, not a condition of the appointment.
It is applied automatically at checkout when you arrive through this page, so there is no code to enter. The link carries your partner reference, which is also how we know to give you the partner rate on renewal.
Yes. The revised Swiss Federal Act on Data Protection has its own representative requirement under Article 14 for organisations outside Switzerland that process data on people there. It is a separate appointment from GDPR, and it is available as its own subscription.