DataRep Reasonable Use Policy

DataRep wants to encourage You, as our client, to make our contact details as easily accessible as possible for data subjects and Data Protection Authorities, to ensure they are able to raise their questions and requests to You in the manner which is most convenient for them.

To enable this, DataRep permits unlimited data requests across the contact methods and locations which apply to each client’s appointment.

However, in doing so, we need to balance the administration cost we would face if one or more clients received many more data requests than our average clients, creating higher operational costs across our business which we would have to pass along across all our clients.

If – during any annual appointment period – communications received by DataRep on your behalf exceed the Reasonable Use Cap (other than obvious ‘spam’ messages which, where we have been able to filter out and ignore them, will not be counted), DataRep reserves the right to charge an additional €10 per communication received in excess of that number. 

The Reasonable Use Cap is set out in your Order document, and is calculated as the lower of:

  • 1 communication for every 500 data subjects declared by You (or, if larger, permitted within the package You have purchased);
  • The sum paid for the annual appointment, divided by our rate for each excess communication (€10), rounded up; or 
  • 1,000 communications in total.


To put this in context, we have found that on average we received fewer than 1 communication for every 50,000 EU / EEA / UK data subjects for which our clients processed personal data.

To keep the communications received by DataRep to a reasonable level and relevant to the data protection service which we provide, You agree that You will make reasonable efforts to prevent non-privacy related communications from being made to DataRep by only including DataRep’s contact information in locations (online and offline) relevant to the raising of data privacy requests or Data Protection Authority queries, and by indicating to those who view our contact methods that they should only be used by individuals and authorities in the jurisdictions where DataRep has accepted your appointment of us as your Representative for the purposes of raising requests about the processing of personal data (e.g. the EU/EEA and/or UK).

Do you need an EU/EEA Representative as well?

You may need this if you have no office in the EEA – if so, please visit the website for our sister company DataRep, which can provide this service for both the EU/EEA and UK.

We see you’re leaving our site

Can we help you further?

 If you have a question or you’d like more information, please leave your email address and someone will contact you: