Answer four yes/no questions and find out whether your company needs a representative under Art. 27 GDPR in the EU and, for UK data subjects, a UK representative under the UK GDPR. The result is an initial orientation, not legal advice and no substitute for a case-by-case review.
Find out in four questions whether your company must appoint an EU and a UK representative, indicative, not legally binding.
Under Art. 3(2) GDPR, European data protection law also applies to companies without an establishment in the EU when they deliberately offer goods or services to people in the EU or monitor their behaviour. Where this market-location rule applies, Art. 27 GDPR generally requires a representative appointed in writing in the EU, acting as the point of contact for data subjects and supervisory authorities. After Brexit, the UK GDPR contains an almost identical rule and requires a separate UK representative for people in the United Kingdom.
This self-check does not replace a legal review. It gives you a first, honest tendency and a starting point for the conversation. All answers stay in your browser; no input is transmitted.
Answer every question with yes or no. You receive an instant, indicative classification together with the next steps.
Representation is more than an address. It needs a reachable office that responds in a legally sound way, in the EU and the UK.
We provide the point of contact appointed in writing under Art. 27 GDPR in the EU and the corresponding representative under the UK GDPR in the United Kingdom, with a physical address, reachable for data subjects and supervisory authorities. Both representations come from a single source instead of two providers.
Requests from data subjects and authorities are not simply forwarded but answered with legal substance. The representation is led by doctorate-level lawyers with CIPP/E who apply the GDPR and the UK GDPR with confidence and react correctly in a serious case.
We communicate with data subjects and authorities in German, French and English, relevant for an EU-wide audience and the United Kingdom. As an independent law firm, we advise in a product-neutral way and in the interest of your company.
A representative under Art. 27 GDPR is a natural or legal person established in the EU that a company without an EU establishment appoints in writing. It serves as the point of contact for data subjects and supervisory authorities on all processing matters and is reachable alongside the company, without replacing the company's accountability.
That depends on your reach. If you target people in the EU, a representative under Art. 27 GDPR may be required; if you additionally target people in the United Kingdom, the UK GDPR has required a separate UK representative since Brexit. Companies serving both EU and UK markets usually need both. SIDD provides both representations from a single source.
The cost depends on reach, data volume and the expected number of requests. For a concrete fixed-price quote, please use the quote form or our contact form; we reply within one business day with an offer tailored to your case.
Yes. Art. 27 GDPR provides an exception for only occasional processing that does not include large-scale processing of special categories of personal data and is unlikely to result in a risk to the rights and freedoms of data subjects; the UK GDPR is similar. Public authorities are also exempt. Whether an exception applies is a legal question and must be examined carefully case by case, which we do for you.
We appoint your point of contact under Art. 27 GDPR in the EU and your representative under the UK GDPR, legally led, multilingual and from a single source.