EU & UK Representative

Getting started with your EU & UK Representative.

Who needs an Article 27 representative, what Superset does as yours, and the one step you take on your side.

Who needs a representative

Under GDPR Article 27, a company that processes the personal data of EU or UK residents but has no establishment there must appoint a local representative. The representative is the contact that regulators and data subjects in those jurisdictions can reach. If you are a US data broker handling EU or UK resident data, you almost certainly need one, and the exposure for going without runs up to €20 million.

EU and UK coverage are separate. If you process data from both, you need a representative in each.

What Superset does

Superset serves as your appointed representative. We are the named, reachable contact in the EU and the UK, and we handle the regulatory inquiries, enforcement communications, and data subject requests that arrive through that channel, coordinating responses with you.

Choose your coverage

Open ai.trustsuperset.com/eu-uk-rep and pick what you need:

EU representative UK representative Both

Choose monthly or annual billing and subscribe. Your representative is active once you are signed up.

List us in your privacy policy

GDPR requires your representative to be reachable, so their contact details go in your website's privacy policy. Once you subscribe, the platform gives you ready-to-paste text, including your representative's dedicated contact address. Add it to your privacy policy so regulators and data subjects can reach them.

For your information

A representative is not a DPO The Article 27 representative handles regulatory and data subject communications. A Data Protection Officer advises on your broader compliance program and, under GDPR, has to be independent. They are separate roles, and you may need both. Ask your Superset contact if you are not sure.
Welcome to Superset If anything in this guide doesn't behave the way it says, email [email protected] and we'll dig in.