Compare Responsible Person Services for UK Compliance (2026)

• UK compliance requires a responsible person for certain products (Article 16 GPSR).
• Providers differ in price, included services, and EU/UK coverage.
• Check if the fee covers unlimited products, documentation, and request handling.
• Some providers offer verifiable certificates and multilingual support.
• Hidden costs may apply for extra products, urgent requests, or switching.
• Not all sellers need a responsible person—see the matrix below.

Updated 19 October 2026 · 7 sources checked

Providers compared

Prices as published on each provider's website on 19 October 2026, excluding VAT unless stated. Each row links to its source.

What the Law Requires (Article 16 GPSR & UK Equivalents)

UK and EU product safety law requires that non-EU and non-UK manufacturers selling goods to consumers must appoint a responsible person established in the relevant region. In the EU, this is set out under Article 16 of Regulation (EU) 2023/988 (GPSR). The responsible person acts as the official point of contact for market surveillance authorities and consumers, holds technical documentation (such as the declaration of conformity and technical file), and must cooperate with authorities on corrective actions and recalls. The UK has mirrored these requirements post-Brexit, so sellers targeting both markets may need separate representatives in the EU and UK.

Failing to appoint a responsible person can result in serious consequences: customs can hold or refuse entry to goods, market surveillance authorities can order withdrawal from sale, and platforms like Amazon or TikTok Shop can suppress listings until compliance is proven. The responsible person’s details must appear on the product, packaging, or accompanying documentation, and must be kept up to date. For own-store sellers (e.g., Shopify), enforcement often occurs at customs or after a consumer complaint, while for marketplace sellers, platforms typically enforce the requirement at onboarding or listing updates.

Providers differ in what they offer. Some, like REP27, cover the entire EEA and provide a verifiable certificate, multilingual privacy notice wording, and a request desk. Others may only provide a basic designation letter or may charge extra for additional services. Always confirm what is included before appointing a provider.

Included / Not Included / Extra Fees Table:

How to Choose a Responsible Person Service

Choosing the right responsible person service is critical for compliance and business continuity. Start by confirming the provider’s jurisdiction: for EU compliance, the provider must be established in an EU Member State; for UK compliance, in the UK. Next, assess whether the published price covers all your products or only a limited number of product types or families. Some providers, such as REP27, offer unlimited product coverage per plan, while others (e.g., EAS Project, Euverify) may restrict coverage or charge extra per product family.

Check if the provider will hold and produce technical documentation as required by law. A verifiable certificate or register entry can be crucial in proving compliance to authorities or platforms—REP27, for example, offers a QR code and public verification page. Multilingual support for privacy notices and consumer queries is another key differentiator, especially for sellers shipping to multiple EU countries.

Ask for a sample designation letter and certificate before signing. Clarify if the provider will forward consumer and authority requests promptly and in which languages. Finally, review the terms for switching providers, notice periods, and any per-request or urgent handling fees.

Decision Matrix:

What the Price Really Includes

Responsible person service pricing can be misleading if you do not check the details. Some providers advertise low annual or one-off fees, but these may only cover a single product type or family, or exclude critical services like document holding or request forwarding. For example, EAS Project’s EUR 199 per year covers only one product type, while Euverify’s GBP 490 covers up to five product families. REP27’s plans (EUR 290-890 per year) include unlimited products, a written designation, a verifiable certificate, multilingual privacy notice wording, a request desk, Article 30 records, and a Swiss assessment at no extra cost.

Always ask if the price includes:

• All your product types or just one/few?
• Designation letter and public verification?
• Technical documentation holding and production?
• Forwarding of consumer and authority requests?
• Multilingual support for privacy notices and queries?

Some providers may charge extra for urgent requests, additional product types, or document production. For example, switching to REP27 from another provider costs only the renewal price, not the first-year price, if the technical file already exists. Always request a full contract and a breakdown of included and excluded services before signing.

Checklist for Buyers:

1. Confirm your need for a responsible person (see matrix above).
2. Check provider’s jurisdiction (EU/UK as required).
3. Request a sample designation letter and certificate.
4. Ask if the price covers all your products and markets.
5. Check how documentation is held and accessed.
6. Review contract for hidden fees and notice periods.
7. Appoint the provider and update your labels and listings.

Hidden Costs and What Providers Usually Do Not Say

Many responsible person services do not advertise all their fees or contract terms upfront. Common hidden costs include charges for each additional product type, urgent document requests, or per-incident handling of authority or consumer queries. Some providers may impose notice periods for termination, or limit their liability for compliance failures. For example, REP27 includes unlimited products per plan and offers a renewal price for switches, but does not act as a Swiss representative (only providing an exemption assessment).

Before appointing any provider, clarify:

• Are there per-product or per-family fees?
• Is there a fee for urgent requests or document production?
• What is the notice period for termination?
• What liability, if any, does the provider accept?
• How is switching handled—can you overlap appointments to avoid gaps?

Some providers may not forward consumer or authority requests in all required languages, or may not provide a verifiable certificate or public register. Always ask for these details in writing before signing.

What Providers Usually Do Not Say:

• Notice periods for termination may lock you in for a year or more.
• Liability for non-compliance is usually limited or excluded.
• Some only provide a basic letter, not a full compliance package.
• Extra fees may apply for document updates, urgent requests, or additional product lines.

How Appointment Works: Step by Step

1. Assess your need: Use the decision matrix to confirm if your business requires a responsible person for UK or EU compliance.
2. Choose a provider: Compare published prices, included services, and geographic coverage.
3. Sign the mandate: The provider issues a written designation (mandate) as required by law. For REP27, this is done within 24 hours after payment and form completion.
4. Receive certificate and address: You receive the provider’s EU/UK address and, if available, a verifiable certificate (e.g., REP27’s QR code and public verification page).
5. Update compliance details: Add the responsible person’s details to your product labels, packaging, inserts, and online listings. For marketplaces, update the relevant fields in Seller Centre or equivalent.
6. Documentation and requests: The provider holds your technical documentation and forwards any consumer or authority requests within the agreed timeframe (e.g., REP27 forwards within two business days).
7. Switching providers: If changing providers, sign the new mandate before terminating the old one to avoid any compliance gap. Update labels and listings accordingly. REP27 allows switches at the renewal price if the technical file exists.

For own-store sellers, ensure compliance details are on the product and packaging, not just online. For marketplace sellers, ensure the platform fields are updated promptly to avoid listing suppression. Always keep documentation up to date and accessible for at least ten years as required by law.

Risks, Fines, and Enforcement

Failing to appoint a responsible person exposes your business to significant risks. Customs authorities can detain or refuse entry to products without a valid responsible person, and market surveillance authorities can order withdrawal from sale or initiate recalls. Online marketplaces such as Amazon, TikTok Shop, and others may suppress your listings until you provide proof of compliance. Fines can be substantial: under GDPR Article 83(4)(a), failure to designate a representative can result in penalties up to EUR 10 million or 2% of worldwide annual turnover. While the GPSR does not specify fine amounts, enforcement is strict and can lead to loss of sales, reputation damage, and even criminal liability in some cases.

Enforcement can occur at several points:

• At customs, when goods enter the EU or UK
• During marketplace onboarding or listing updates
• After a consumer complaint or incident
• During routine audits by market surveillance authorities

Authorities may check the validity of your responsible person appointment by scanning a QR code or checking a public register (as provided by REP27). If your appointment has lapsed or is unverifiable, your products may be removed from sale immediately. Always ensure your responsible person details are current and verifiable, and that your provider can produce documentation on request.

For own-store sellers, enforcement often happens after a problem is reported, which can lead to costly recalls or stock destruction. For marketplace sellers, enforcement is automated and listings can be suppressed without warning. The cost of non-compliance far outweighs the annual fee for a responsible person service.

Realistic Scenarios: Who Needs What?

• Scenario 1: US SaaS company
  A SaaS provider based in the US processes EU customer data. They do not sell physical goods, so do not need a responsible person for product compliance. However, they do need an Article 27 GDPR representative if they fall under GDPR Article 3(2). REP27 offers combined GDPR and GPSR services for those who need both.
• Scenario 2: Chinese Amazon seller
  A manufacturer in China sells toys on Amazon.de. Amazon requires a GPSR responsible person before listings go live. The seller appoints REP27 or another provider, updates the responsible person field in Seller Centre, and prints the provider’s EU address on product packaging. The provider holds the technical file and responds to authority requests. If switching providers, the seller ensures overlap to avoid listing suppression.
• Scenario 3: UK online shop selling to EU
  A UK-based online retailer sells electronics to EU consumers via their own Shopify store. Post-Brexit, they need both a UK and an EU responsible person. They appoint a provider established in the EU for GPSR compliance and ensure the responsible person’s details are on the product, packaging, and website. They also check if their provider offers a Swiss assessment, as required for sales to Switzerland.

In all cases, the simplest compliant route is to appoint a provider with experience in both regions, confirm unlimited product coverage, and ensure documentation is held and requests are forwarded as required by law.