Do I need a UK representative?
To understand whether you need a UK representative you should ask yourself the following questions:
- Do you have customers in the UK?
- Is your organisation based outside the UK with no physical presence or employees in the country?
- Do you offer goods or services to UK residents or monitor their behaviour online?
If you answered yes to all three, you are likely required to appoint a UK representative. This representative acts as the official contact for both individuals and the ICO under Article 27 of the UK GDPR.
The UK GDPR Representative Service
Our annual subscription service is provided by our sister company, GRCI Law (operating as GRC Solutions), which will serve as your designated UK representative. GRCI Law is registered and operates in England.
We will:
- Act as a UK-based contact point for data subjects and the ICO regarding personal data processing matters;
- Hold a copy of your records of your processing activities in compliance with Article 30 of the UK GDPR and provide access to the ICO if requested;
- Manage communications between your organisation and UK-based data subjects;
- Facilitate interactions between your organisation and the ICO;
- Assist with ICO-related compliance matters where necessary.
Please note that this service does not include advice or guidance on Article 30 records of processing activities. This service is for single entity organisations with 500 employees or less. For larger organisations contact us for pricing.
