When you appoint Rep27 to be your UK Representative, we will provide the following services:
→ UK GDPR Compliance
As required by UK GDPR, we will enter into a Written Agreement to satisfy your obligations under Article 27, and you will then be able to publicise our appointment in your privacy policy as appropriate to comply with your obligations under Articles 13 and 14.
→ Dealing with supervisory authorities
We provide the required point of contact between your organisation and the UK ICO, providing a professional, efficient and seamless service. Where necessary we will also continue to act as that interface ensuring your ongoing compliance with UK GDPR.
Rep27 will also provide support with the management and notification of personal data breaches.
→ Dealing with Data subjects
If your data subjects wish to communicate with you, including to exercise their UK GDPR rights, whether in the form of (Data) Subject Access Requests (more commonly referred to as DSARs or SARs), the right be forgotten or to object to your processing, we provide the professional interface you need to maintain the trust and confidence of your valued customers and contacts. In the context of litigation, we will work together with your preferred legal counsel to ensure that privilege in your communications are protected.
→ Retaining records of your processing
If your organisation has over 250 employees then we, as your representative, are obliged to hold details of your processing activities in the UK. We provide a secure environment within which to hold those details. If your organisation has fewer than 250 employees, we may still have to hold such records if you cannot show that:
• the processing you carry out is unlikely to result in a risk to the rights and freedoms of data subjects;
• the processing is only occasional and not regular or repeated; or
• the processing includes sensitive (Article 9(1) personal data or personal data relating to criminal convictions and offences referred to in Article 10.
→ Maintain legal privilege
It may be critical for you to maintain legal privilege in your dealings with data subjects or the ICO. We ensure that our services do not compromise your position and can make recommendations for local counsel if required. We also work closely with DPOs to ensure that each client’s privacy programme functions seamlessly.
→ Language Support
We do not take fluency in English for granted notwithstanding its widescale use in business. For clients who need support in relation to communications with regulators and third parties in English, this can also be provided.
→ Bespoke client landing pages
For clients who would prefer their own bespoke branded landing page for anyone wishing to contact them through Rep27, we can create bespoke landing pages. Please contact us to discuss options and prices.
