Article 27 representation
Your UK GDPR representative. Clearly appointed. Securely managed.
Establish a UK representative contact point for your organisation's applicable Article 27 obligations. Manage your appointment, processing records and regulatory correspondence through a secure, straightforward service.
What is UK GDPR Article 27?
Article 27 of the UK GDPR requires certain controllers and processors that are not established in the UK to designate, in writing, a representative in the UK. It applies where UK GDPR reaches them through Article 3(2): offering goods or services to individuals in the UK, or monitoring their behaviour in the UK. Some organisations are exempt. See the full guide.
Which businesses may need a UK representative?
Overseas organisations that deliberately target UK individuals, or monitor their behaviour, and have no UK establishment. Examples where it may be relevant: SaaS, e-commerce and AI companies. It depends on the facts, and many organisations with UK visitors are not caught. Start with the eligibility check.
What LeadAI RegBridge delivers
Written appointment
An Article 27 designation signed by both parties before it takes effect.
UK contact details
Representative identity and contact details, with instructions for your privacy notice.
Records
Article 30 records you supply, kept available, with templates and guided preparation on higher plans.
Correspondence
ICO and data-subject correspondence logged and forwarded, with a record that it was sent.
How the appointment works
- Screen. Use the eligibility check. The result is a provisional view, not a legal opinion.
- Enquire. Tell us about your organisation and UK activities. Complex cases get a manual review.
- Review. We review your details and decide whether we can accept the appointment.
- Agree. A written Article 27 appointment is prepared from our approved agreement and signed by both parties.
- Onboard. You supply the information and records needed. We give you our representative details to publish.
- Active. The appointment becomes effective only after signature, acceptance, the required information and any agreed payment condition. Payment alone never activates it.
- Renew. Annual review and renewal, with advance notice of any change in fees.
Plans
Proposed annual pricing, excluding VAT unless stated.
Essential
£299 per year (proposed)
For lower-complexity overseas organisations.
- Written Article 27 designation
- UK representative identity and contact details
- Privacy notice insertion instructions
- Secure client onboarding
- Submission and maintenance of applicable Article 30 records supplied by the client
- Reception and forwarding of ICO correspondence
- Reception and forwarding of data-subject correspondence
- Annual renewal administration
- Up to 25 routine non-ICO correspondence items per contract year
Professional
£599 per year (proposed)
Everything in Essential, plus:
- Guided processing-record preparation
- Secure customer dashboard
- Records completeness checklist
- Annual documentation update workflow
- Evidence export
- Up to 50 routine non-ICO correspondence items per year
Assurance
£1,099 per year (proposed)
Everything in Professional, plus:
- Quarterly documentation reviews
- Governance risk register
- Structured personal-data and AI-system inventory
- Annual management summary
- Up to 100 routine non-ICO correspondence items per year
Common questions
Read all 20 answers, including who needs a representative and what happens if the ICO makes contact.