EU Representative Service

We act as your official EU representative for all EU member states, covering your obligations under Art. 27 GDPR in a single engagement — no need to appoint representatives country by country.

We receive all GDPR-related inquiries from supervisory authorities and data subjects across the EU, forward them to you via your preferred communication channel, and provide an initial legal classification so you can respond efficiently.

We provide your records of processing activities to supervisory authorities upon request — a core duty of the EU representative under Art. 27 GDPR — and can assist in creating or updating those records as an add-on service.

Beyond the representative mandate, our data protection experts can handle inquiries substantively, advise on any data protection issues arising from EU regulatory requests, and support you with broader GDPR compliance work.

If there is no branch in the EU, but goods or services are offered to persons within the EU or the behaviour of persons within the EU is monitored (e.g. tracking and profiling), an EU representative according to Art. 27 GDPR is usually required.

Failure to designate an EU representative may result in fines of up to €10 million or up to 2% of the annual worldwide turnover for the previous fiscal year.

The tasks of the EU representative are defined in Art. 27 GDPR. The representative serves as a contact point for supervisory authorities and data subjects from the EU, assists in receiving and forwarding data subject inquiries, and provides the records of processing activities upon request of the supervisory authority. The representative performs a representative function within the EU and supports compliance with the requirements of the GDPR.

Data subjects must be informed about the EU representative, meaning the representative's contact details must be included in the privacy policy. In addition, the EU representative must be named in the records of processing activities.

The EU representative's function is essentially to be available as an external point of contact for supervisory authorities and data subjects in the EU — it does not affect the liability of the controller. A data protection officer has a much broader scope: they are both an internal and external point of contact for all data protection issues, and perform legally defined tasks such as monitoring compliance with data protection regulations and informing and advising employees and management.