### Non-EU companies processing data of EU/UK/Swiss residents must designate a representative according to GDPR Article 27.
This appointment ensures a local point of contact for EU residents, supporting their GDPR rights and assisting EU authorities in enforcing GDPR regulations on non-EU entities. Our GDPR representatives are your full-time on-the-ground EU/UK/Switzerland support, ensuring your operations are [GDPR Article 27](https://gdpr-info.eu/art-27-gdpr/) compliant within the EU market. We tailor our services to align with the unique requirements of every organization we collaborate with, ensuring a smooth pathway to compliance.

## Why achieved® representation

#### Automation Where It’s Needed

We've designed a process that efficiently manages subject access requests with precision. This encompasses automated numbering and meticulous tracking of all inquiries. Additionally, we handle docketing due dates, guaranteeing prompt responses and alleviating any worries about missing deadlines.

#### Timely Data Laws & Policy Updates

Our webinars and newsletters serve as pivotal tools to keep your business informed about the most recent regulatory shifts concerning GDPR compliance. These valuable resources undoubtedly offer expert insights, practical guidance, and essential tips, ensuring you stay informed of crucial developments in the field.

#### Regulatory-Friendly Record Retention

We offer a secure EU-based server for the repository of your Article 30 Processing Record. Additionally, our record retention platform offers convenient and user-friendly access. This allows you to effortlessly update your files and respond promptly to any inquiries or requests. Our streamlined platform guarantees ease.

## **Your Article 27 Representative**

### Our Article 27 Representatives are a team of seasoned advisors.
Together, we have over 40 years of experience in client services and international policy. This wealth of expertise allows us to offer tailored strategic and operational guidance, addressing your specific data protection challenges. We focus on delivering precise privacy counsel and breach guidance within the EU/UK/Switzerland. We allocate dedicated data privacy experts to manage initial regulatory inquiries, ensuring a proactive approach to compliance. To enhance client interaction, each client receives a designated team member and access to an SMS channel, guaranteeing swift and direct communication.

### ACHIEVED® REPRESENTATION PRICING PACKAGES

| Package                | Global Annual Revenue | Monthly Price | Billed Annually |
|-----------------------|-----------------------|---------------|-----------------|
| Entrepreneur          | < $1MM                | $105          | $1,250          |
| Small Non-Profit      | $1MM - $9MM           | $145          | $1,750          |
| Tier 1               | $10MM - $24MM         | $208          | $2,500          |
| Tier 2               | $25MM - $49MM         | $312          | $3,750          |
| Tier 3               | $50MM - $99MM         | $416          | $5,000          |
| Tier 4               | $100MM - $499MM       | $760          | $9,000          |
| Tier 5               | $500MM+               | Please contact us | Please contact us |

### ACHIEVED COMPLIANCE ADDITIONAL SERVICES

| Additional Services                                                                    | Pricing  |
|---------------------------------------------------------------------------------------|----------|
| Direct access to your .eu .uk and .ch email inboxes                                  | $600/annually |
| Platform storage of processing record for easy, shared access                          | $150/annually |
| Processing record template with instructions and 1-hour webinar on how to use       | $750     |
| Review of an existing processing record with recommendations                           | $300     |
| Standard Operating Procedures template for Responding to Subject Access Requests      | $250     |
| Preparation of Standard Contractual Clauses, statement of sufficiency, and privacy policy revisions | $6,000  |
| Breach support                                                                        | Please contact us |

##### FREQUENTLY ASKED QUESTIONS

- **What is the GDPR?** The General Data Protection Regulation, or GDPR, is a comprehensive data protection and privacy regulation in the EU. It applies to organizations that process the personal data of EU residents. In other words, it affects organizations based outside the EU that handle the personal data of individuals within the EU.
- **What is Article 27 of the GDPR?** Non-EU companies handling EU-UK resident data must appoint an EU-UK-based representative under GDPR Article 27. This ensures local privacy contact for EU residents, facilitating their GDPR rights and aiding EU authorities in enforcing GDPR on non-EU firms.
- **Where should my General Data Protection Regulation representative be located?** A GDPR representative should be located within one of the European Union (EU) member states where the data subjects are located. The purpose of having an EU representative is to establish a local point of contact for data subjects and supervisory authorities.
- **When is a UK GDPR Representative required?** Companies based outside the UK that process personal data of individuals within the UK or engage in sales to UK consumers require a UK GDPR Representative.
- **Why is a Swiss representative required?** According to the Swiss Federal Act on Data Protection, if you handle the personal data of Swiss residents, you are obligated to designate a representative based in Switzerland. This representative serves as the local point of contact for regulators and Swiss citizens alike.