UK representative
Who needs one
Article 27 of the UK GDPR requires organisations established outside the United Kingdom to appoint a UK representative if they offer goods or services to people in the UK, or monitor their behaviour. It applies to a great many US and EU businesses that have UK customers or users and no UK office, and it is frequently discovered late — usually when a UK customer, a privacy notice review or a procurement questionnaire raises it.
What is provided
Xelvio is named as your UK representative in your privacy notice and to the Information Commissioner’s Office. We act as the point of contact for UK data subjects and for the ICO; hold and maintain a copy of your record of processing activities; receive, log and pass on correspondence, subject access requests and complaints; and provide an annual summary of everything received.
What is not included
The appointment is a point of contact and a record-keeping duty. Advice on building your record of processing activities, responding substantively to a request, or bringing your processing into compliance is separate work, charged at the standard day rate or under one of the fixed-fee services.
Terms
| Organisation size | Annual fee |
|---|---|
| Up to 10 staff | £800 |
| 11 to 250 staff | £1,500 |
| Over 250 staff, or high enquiry volume | £2,500 |
Annual, renewing, no setup fee. Cancellable at the end of any year.
All fees exclude VAT.