Secure Your Organization Unrivaled & Cost-Effective Article 27 Compliance with Achieved® Representation

FREQUENTLY ASKED QUESTIONS

• What is the GDPR? The General Data Protection Regulation, or GDPR, is a comprehensive data protection and privacy regulation in the EU. It applies to organizations that process the personal data of EU residents. In other words, it affects organizations based outside the EU that handle the personal data of individuals within the EU.
• What is Article 27 of the GDPR? Non-EU companies handling EU-UK resident data must appoint an EU-UK-based representative under GDPR Article 27. This ensures local privacy contact for EU residents, facilitating their GDPR rights and aiding EU authorities in enforcing GDPR on non-EU firms.‍
• Where should my General Data Protection Regulation representative be located? A GDPR representative should be located within one of the European Union (EU) member states where the data subjects are located. The purpose of having an EU representative is to establish a local point of contact for data subjects and supervisory authorities. Therefore, it is more convenient for them to address privacy-related matters and ensure compliance with the General Data Protection Regulation (GDPR).
• When is a UK GDPR Representative required? Companies based outside the UK that process personal data of individuals within the UK or engage in sales to UK consumers require a UK GDPR Representative. Before Brexit, many EU companies may not have needed a GDPR representative.
• ‍Why is a Swiss representative required? According to the Swiss Federal Act on Data Protection, if you handle the personal data of Swiss residents, you are obligated to designate a representative based in Switzerland. This representative serves as the local point of contact for regulators and Swiss citizens alike. Similar to the requirements in the EU, Switzerland requires an ease of access to reach a company by the regulators or citizens, and a timely reply to inquiries and complaints.