Mishcon de Reya page structure
Site header
Menu
Main content section

Assign: your data protection representative

YOUR EU/UK SUBSCRIPTION SERVICE

Get in touch

Your responsibilities 

Data protection legislation in the EU and the UK requires non-EEA / non-UK organisations to appoint a local representative. The representative acts as a point of contact to ensure effective communication with regulators and data subjects within the EU and the UK.

While you could set up an office in the appropriate location(s) and employ a local representative yourself, there is an easier way that saves you time and provides peace of mind: Assign, our EU/UK representative subscription service.

What does the law require? 

EU Representative

If you are a non-EEA based business:

  • with no offices, branches or other base in the EEA (the EU, Iceland, Liechtenstein and Norway), and
  • you are offering goods or services to, or monitoring the behaviour of, individuals in the EEA,

then you will need to appoint an EU Representative in the EEA.

Your EU Representative acts as your point of contact for supervisory authorities and data subjects in the EU. They are essentially your trusted point of contact in the EU.

Our entity that provides the EU Representative services is located in Ireland.

UK Representative

If you are a non-UK based business:

  • with no offices, branches or other base in the UK, and
  • you are offering goods or services to, or monitoring the behaviour of, individuals in the UK,

then you will need to appoint a UK Representative in the UK.

Your UK Representative acts as your point of contact for supervisory authorities and data subjects in the UK. They are essentially your trusted point of contact in the UK.

Below is a table outlining when an organisation might need to appoint a representative:

Organisation EU Representative required? UK Representative required?
Non-EEA, non-UK based organisation YES YES
EEA, non-UK based organisation N/A YES
Non-EEA, UK based organisation YES N/A

Are there any exceptions? 

You don’t need to appoint a Representative if:

  • you do not offer goods or services into the EEA/UK and do not monitor data subjects in the EEA/UK, 
  • you are a public authority or body,
  • your data activities in the EEA/UK are: only occasional, do not include large scale processing of special category data or criminal convictions data, and are unlikely to result in a risk to the individuals whose data you’re handling.

 

How does Assign work? 

Everyone who provides our Assign service is a qualified privacy professional, who fully understands the relevant regulations in the UK and EU. 

Subscribing to Assign starts from £150/month + VAT per representative appointment and can be easily scaled-up for your other group members and to cover both the UK and EU.

As your UK / EU Representative we will:

1.

Provide you with a local contact point within the EU/UK.

2.

Notify you of any communications from supervisory authorities or data subjects.

3.

Keep a copy of your records of data processing activities.

 

You can also ask us to provide the following additional services:

1.

Liaise with EU/UK supervisory authorities on your behalf.

2.

Facilitate effective communication between you and your data subjects, including organising translation services as needed.

3.

Provide evidence when required that your business is complying with your representative requirements.

Find out more

To find out if your organisation is eligible, please complete the form below and we will be in touch. If you need any further information, please contact representative@mishcon.com. 

How can we help you?
Help

How can we help you?

Subscribe: I'd like to keep in touch

If your enquiry is urgent please call +44 20 3321 7000

I'm a client

I'm looking for advice

Something else