REP27 · What it costs
Pricing · Article 27 GDPR
Published annual prices for an EU representative run from under €300 to well over €2,000, and the spread is not a market inefficiency: the providers are selling different things. This page sets out what each tier actually includes, where the hidden charges sit, and what our own fee covers.
Before comparing numbers, work out which of these you are being quoted for.
A postal address in a Member State that forwards what arrives. No mandate accepting the Article 27 tasks, no records held, no answer within any set time. Cheap because almost nothing is performed.
A written mandate, a certificate, a request desk with a response commitment, and the Article 30 record held on your behalf. This is what Article 27 actually contemplates.
A law firm that acts as representative and also advises. Useful if you want counsel, but you are paying legal rates for a role that is largely administrative.
| Charge | Typical range | Included with us |
|---|---|---|
| Setup or onboarding fee | €0 – €250 one-off | Included |
| Per data subject request handled | €25 – €90 each | Included from Standard |
| Article 30 records held and produced | €100 – €400 a year | Included from Standard |
| Additional languages at the desk | Often English only at entry tier | Eight languages |
| Certificate or verification page | Frequently not offered | Included |
| UK representative | Priced separately by everyone | Discounted when bought together |
| Renewal increase | Common after year one | Renewal is lower: €240 / €390 / €690 |
Annual, paid in advance, cancellable before each renewal. From the second year the renewal drops to €240, €390 and €690. No VAT for customers outside the EU; inside the EU with a valid VAT number, reverse charge.
Request the designation template before paying. If it does not list the Article 27 tasks and accept them, you are buying an address.
A supervisory authority request is the moment the service is tested. Same business day is achievable; "we will forward it" is not a commitment.
Article 30(1) requires the representative to keep it and produce it on request. A provider that does not hold it cannot perform the role.
Estimate the requests you get in a year and add them in. It is the single largest difference between quotes.
Introductory pricing is common. Ask for the year-two figure in writing.
Because providers sell three different things under one name. At the bottom is a mailbox that forwards letters. In the middle is a mandated representative with a request desk and records handling. At the top is a law firm retainer that includes advice, which a representative is not allowed to give as part of the role anyway.
They are common and worth checking. Several providers advertise a low annual fee and then charge per data subject request handled, typically €25 to €90 each. One awkward month can cost more than the subscription. Our Standard plan has no per-request charge.
It does with most providers, who band by turnover, employee count or number of records. We price by what the role actually costs to perform, which is driven by how many requests arrive, not by how big you are.
The risk is not the price, it is what the mandate says. Read whether the provider accepts the Article 27 tasks in writing, whether it holds your Article 30 record, and how fast it forwards an authority request. A cheap designation that nobody answers is worse than none, because it names a party who will not respond.
A second, separate designation under Article 27 of the UK GDPR, with its own certificate and its own verification code, issued by our British entity. Bought together with the EU designation it is discounted; bought alone it is priced on its own.
No setup fee and no minimum term with us. The fee is annual, paid in advance, and you can cancel before each renewal. From the second year the renewal is discounted.
Legal advice, answering requests on the merits, negotiating with an authority on your behalf, and acting as your DPO. No representative may do the last one, and a provider offering the others is selling you something other than Article 27.
Related: do you need an EU representative at all? · GPSR responsible person for Amazon sellers
Free check first: we read your public privacy notice and tell you whether a representative is already named.
See the three plans Run the free check