At one of my recent free webinars, we talked about the need for EU representatives. Recently I had cause to talk with the ICO about the same topic, and so I wanted to emphasise this again.
The ICO has a simple guide but essentially if:
- You are based in the UK, and
- You do not have a branch, office or other establishment in any other EU or EEA state, and
- You offer goods or services to individuals in the EE, or you monitor the behaviour of individuals in the EEA
then it is likely that you will need to appoint an EU representative, and you should look at https://ico.org.uk/for-organisations/dp-at-the-end-of-the-transition-period/data-protection-now-the-transition-period-has-ended/the-gdpr/european-representatives/
Please note that this applies now and is not dependent on the grace period which ends on 30th April (or 30th June if UK and EU extend it), nor of any future decision of adequacy.
A number of clients are dealing with this in ways which do not involve high costs, so if you would like to find out more why not book a free 20-minute insight call on our website?