If you require a Representative in the UK, to meet the requirements of the Data Protection Act 2018 (as amended post-Brexit by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019), DataRep UK can ensure you meet the best practice standards for this Data Protection Representative obligation.
As the first point of contact when your customers (or the UK Information Commissioner’s Office) have questions about your data processing activities, we provide them with a frictionless data request experience through whichever route they find most convenient.
Your organisation works hard to be compliant with UK GDPR and the privacy expectations of your customers – make sure they can see the hard work you put in to meet these obligations by appointing a Representative which helps them access their data protection rights.
If you appoint DataRep to be your Data Protection Representative, you will receive these benefits:
Local presence in the UK
DataRep UK’s contact location in the UK gives your business an address to which your data subjects (and the ICO) can raise data requests directly to you.
Unlimited communications
We appreciate our clients can’t predict how many data requests they may receive, so we allow unlimited communications within each of our packages, subject to our Reasonable Use Policy.
Representative cover in the EU/EEU and Switzerland
If you need to add a Representative in the EU/EEA or Switzerland later, we can upgrade our appointment to extend it to these areas. If you need an EU/EEA or Swiss Representative now, please visit the website of our sister company DataRep, which can provide all these under a single payment!
Free GDPR Representative consultation
We can provide you with a free consultation where we will advise you whether you are required by UK GDPR to appoint a Data Protection Representative, or the equivalent EU/EEA and Swiss obligations, based on the circumstances of your organisation and its data processing operations.
Next-working-day service level
Simplified data requests for your customers
As well as our email and postal addresses, DataRep make life easier for your customers by offering a landing page specifically for notifying data requests (subject access requests, requests to be forgotten etc.), available for review here.
For clients who spend over £1,500 (or otherwise for an additional £50), we can prepare a landing page for your data subjects with your own branding, giving your customers extra reassurances of the careful treatment of their data (example page here).
Active inquiry management
When we receive a data inquiry from one of your customers, the UK Information Commissioner’s Office or anyone else, DataRep UK will issue them a holding acknowledgement confirming their inquiry is being looked into.
When we pass these queries onto our clients, we also provide general guidance on what actions you should be taking to respond to that inquiry, and the timescales in which to do so.
Renewal usage discount
Most of our clients see low levels of communications; we reward their good practice with discounts at the renewal of their appointment:
| Communications received | Renewal discount* |
|---|---|
|
Fewer than 1 per 5,000 data subjects |
50% |
|
Fewer than 1 per 2,000 data subjects |
25% |
|
Minimum renewal discount |
10% |
Assistance and guidance
When you receive a subject access request or a question from the ICO, or if you are unfortunate enough to suffer a data breach, we can guide you with how to respond and to whom. When the matters are complex, we have consultants available who can provide specific and detailed advice**.
Article 30 record retention
The UK Data Protection Representative is required by Article 30 of UK GDPR (part of the UK Data Protection Act 2018) to hold a copy of their client’s Records of Processing Activities (ROPA) for review by the ICO if they request it.
We hold the Article 30 records of our clients securely in preparation for such a request, and will let you know if and when they are requested by the ICO. We do not charge to update the Article 30 records of processing we hold.
Pricing for the Data Protection Representative service is based on the numbers of UK-based individuals for whom data is controlled or processed, and the sensitivity of the personal data. Please see our SHOP for an idea of the appointment fees applicable to your organisation.
Please note that having a Data Protection Representative is likely to be one of many obligations placed on your business under the UK Data Protection Act 2018; if you require advice on how to be complaint with other aspects of this law, please contact us at compliance@datarep.uk.
* Subject to minimum annual appointment fee of £100
** Additional terms and costs may apply