EU responsible person and EU representative for UK businesses

Since 1 January 2021 a company established in Great Britain is a third-country company for EU purposes. Two consequences follow for anyone selling to EU customers: GPSR requires a responsible person established in the EU for your products, and GDPR Article 27 requires an EU representative if you process EU customers' data without an EU establishment.

Product safety (GPSR)

Your UK address does not satisfy Article 16. You need an EU manufacturer, importer, authorised representative or fulfilment provider to act as responsible person, named on the product and in the listing. Northern Ireland follows EU product rules under the Windsor Framework, so an NI establishment is a special case; ask before relying on it.

Data protection (GDPR Article 27)

If you offer goods or services to people in the EU or monitor their behaviour, and have no EU establishment, you designate a representative in one of the member states where your customers are, and name it in your privacy notice. The exemption for occasional, low-risk processing rarely covers an online shop with EU orders.

The reverse direction

EU companies selling into the UK need a UK representative under UK GDPR and, for product safety, the UK's own rules apply. We provide the EU side only.

What it costs from Malta

GPSR responsible person from €199 a year; GDPR representative from €299 a year; both together €449. English-speaking EU member state, English-language contracts, Maltese law.