Article 3(2) of the EU General Data Protection Regulation applies it to any business outside the EU that offers goods or services to people in the EU or monitors their behaviour. Written advice from London on whether it reaches you, what it requires of your privacy notice, records, contracts and transfers, and how the UK and EU regimes differ where you must comply with both. Plainly: we advise on EU GDPR compliance. We do not act as your EU Article 27 representative; where you need one we introduce an EU established representative through our correspondent network.
Handled entirely in writing. No hearings, no meetings, no attendance required.
Prefer WhatsApp? Message us
Written advice within 24 hours of instruction. Trademarks filed within 48 hours of instruction. Documents in days, not weeks. Never "3 to 5 business days" just to hear back.
| Item | What it covers | Fee |
|---|---|---|
| EU GDPR applicability review | A written answer on whether Article 3(2) reaches your business, which obligations follow, and whether you must appoint an EU representative. | from £395 |
| EU facing privacy notice | Your privacy notice drafted or amended to meet Articles 13 and 14 of the EU GDPR, including representative details where one is appointed. | from £595 |
| UK and EU dual compliance pack | Privacy notice, cookie policy, records of processing and internal policy set drafted to satisfy both the UK GDPR and the EU GDPR from one document set. | from £1,450 |
| Data processing agreement | Controller to processor DPA drafted or reviewed under Article 28 of the EU GDPR. | from £550 |
| International transfers | Transfer mechanism advised and documented for data leaving the EU or the UK: standard contractual clauses, the UK addendum or the IDTA, with the transfer risk assessment. | from £750 |
| EU representative introduction | Introduction to an EU established Article 27 representative from our correspondent network and review of the appointment terms. The representative's own fee is separate. | from £295 |
| Data protection advisory | Questions, reviews and incident support, per matter. | from £395 |
Your fixed fee is confirmed in writing once I have seen your document. Pay within 24 hours of that confirmation for the reduced fee.
Bespoke and urgent matters outside the schedule: £650 per hour, capped estimates given in advance. Corporate retainers from £995/month.
Offering goods or services to people in the EU, paid or free, or monitoring their behaviour online, brings you within the EU GDPR wherever you are. A UK company selling to French customers is inside. So is a US company with EU subscribers.
Since 2021 the UK GDPR and the EU GDPR are separate regimes with separate regulators, separate representative requirements and diverging transfer rules. A business serving both markets needs documents that satisfy both, not one set with the name changed.
We advise on EU GDPR compliance from London. We do not sit as your EU representative, because that must be an entity established in a member state, and we do not advise on member state law. Both are arranged through the correspondent network when needed.
Yes, if it offers goods or services to individuals in the EU or monitors their behaviour, under Article 3(2). Brexit removed the UK from the EU; it did not remove EU customers from the EU GDPR.
If Article 3(2) applies and you have no establishment in the EU, Article 27 requires a representative in a member state where your data subjects are, unless an exemption applies. We assess that as part of the applicability review and introduce a representative where one is needed.
No. The EU representative must be established in an EU member state. We advise on the appointment, review the terms and introduce a representative through our correspondent network.
Mostly, not entirely. Representative requirements, transfer mechanisms, the lead supervisory authority and some member state rules differ. The dual compliance pack closes the gaps from one document set.
The EU adequacy decision for the UK covers transfers from the EU to the UK; transfers onward from the UK, or from the EU to the US or elsewhere, need a mechanism such as standard contractual clauses with a transfer risk assessment. We document the right one for your flows.
No. It is advice on the EU Regulation as it applies to a business outside the EU. Member state supplementary law and any dealings with a national regulator are handled through correspondent counsel in that state.
Send a brief outline of your matter. You will receive a personal reply from a solicitor, with a fixed-fee quote where the scope is clear. Payment is taken before work begins; every fee is fixed in writing first.
UK · EU · US · International