How do I designate a Data Protection Representative?

The Data Protection Representative must be designated in writing. A properly written contract must therefore be in place to provide a clear mandate and specific instructions. Designate EDPO or EDPO UK and get the EDPO compliance certificate.

Where does the Data Protection Representative have to be located ?

Your EU GDPR representative must be located in a (single) country in the EU where the individuals whose data are being processed are located. If your company generally targets the entire EU, then it can choose the country where it wants to base its representative. As...

When do you need to appoint a Data Protection Representative?

You may need to appoint a Data Protection Representative in the EU if: You are based outside the EU/EEA and don’t have an establishment there You offer goods or services to individuals in the EU (for payment or for free and/or you monitor their behavior (such as...

What are the sanctions for non-compliance with the GDPR ?

Infringements to the GDPR (even for non-EU companies) may lead to fines of up to the greater of €20 million or 4% of worldwide turnover, without prejudice to individual and collective claims for damages that can be brought before the courts. The data protection...