Article 27 UK GDPR · Australia

UK representative for Australian companies

Distance is what makes this obligation bite for Australian companies. The rule is the same one that applies to a company in Belgium, but the consequences of having no contact point in Britain are sharper when your office opens as London closes and a statutory deadline is already running.

The Privacy Act stops at the coastline

The Australian Privacy Principles govern how you handle personal information at home, and the OAIC enforces them. Neither reaches the United Kingdom. A British complainant writes to the ICO, and the ICO looks for a representative established in Britain — an address in Sydney is, from its point of view, simply an address abroad.

Eleven hours of difference against a one-month clock

A subject access request under the UK GDPR must be answered within one month. When the request arrives at a British address that is monitored during British hours, the clock is managed from the start. When it arrives in an inbox eleven hours away and is read the next working day, several days are routinely lost before anyone has understood what was asked. The representative exists partly to remove that gap.

No adequacy finding, which changes the transfer question too

The United Kingdom has not made an adequacy finding for Australia. Personal data moving from Britain to an Australian company generally needs a transfer mechanism — the IDTA or the addendum to the standard clauses. That is separate from representation, but it means Australian companies usually have two things to put in place rather than one, and it is worth doing them in the same week.

What a British buyer checks

Australian suppliers selling to British businesses meet this most often in a vendor questionnaire. The field asks for the UK representative and the buyer verifies it. Our designation resolves on a public register with a UK27 code, live or expired at the moment they look, which is a different quality of answer from a scanned letter.

Two things to put in place, not one

Because there is no adequacy finding, Australian companies usually have both a transfer mechanism and a representation gap to close. The transfer paperwork is agreed with the British counterparty; the designation is issued by us. Doing them in the same week avoids the common outcome where the contract is signed, the representative field is left open, and the whole file is reopened three months later.

What applies to a company established in Australia

When the request lands overnight

The practical value of a British contact point is measured in the first forty-eight hours. A request that reaches a monitored British address is acknowledged the same day, logged with its date, and forwarded with the deadline already calculated. The same request sent to a Melbourne inbox on a Friday afternoon London time is read on Monday, which has already spent three of the thirty days available.

Questions from Australian companies

Companies elsewhere, same obligation

What changes from one country to the next is not the rule but the route into it.