Article 27 Representation

Article 27 Representation provides peace of mind to organisations controlling and processing data across borders between the UK and Europe; and the rest of the world. From our final departure from the EU the UK will become as a 'third country' for data privacy purposes, with no equivalence or adequacy guaranteed. At the same time, the UK will have its own amended version of GDPR, enacted under the terms of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019, making the EU will become a 'third country' to us for data protection purposes. Organisations monitoring the behaviours of data subjects, or providing goods and services into the UK from Europe; or from Europe into the UK, that do not have a physical presence in the other jurisdiction will need to have representation in line with Article 27 of the General Data Protection Regulations. Failure to do so will expose UK organisations to fines of up to the greater of 2% of global turnover, or €10m; whilst European and other 'third country' organisations will be open to similar sized fines for non-compliance within the UK. But the impact of Brexit doesn't stop there: in the event of a data breach, organisations who are headquartered in one of the jurisdictions, but are also collecting, controlling and/or processing personal data of subjects in the other could find themselves exposed to investigation and fines from regulators in BOTH the EU and the UK; doubling the maximum fines to the equivalent of 8% or global turnover or €40m! To mitigate this risk Article 27 Representation provides a presence in both jurisdictions, allowing organisations to continue to operate with minimal disruption and peace of mind in knowing that not only are you complying with both sets of regulations, but that you have someone there to represent your organisation’s interests. For more information about how we can help contact: enquiries@article27representation.co.uk