Practical guides

How much does a GDPR representative cost?

What EU and UK GDPR representatives charge, what moves the price, hidden costs to ask about, and Gabsor's plans from $79 per month, billed annually.
Reviewed by Lena, Co-Founder & Head of LegalReviewed 4 min read
Short answer

For the smallest companies, published prices in November 2026 ran from a few hundred to about a thousand euros or pounds a year. Covering the UK as well as the EU usually costs more. In our view, what each price includes, such as request handling and renewal terms, matters more than the lowest number.

On this page

This guide is for you if your company is outside the EU, has customers or users there, and needs a GDPR representative. The GDPR is the EU's data protection law. A representative is your contact point in the EU for data protection authorities, which enforce the GDPR, and for the people whose data you hold.[1] The rule covers you whether you decide how the data is used (a controller) or handle it for a client (a processor).[1] If you are unsure, start with our guide for US companies with EU customers.

What do GDPR representatives charge?

We checked the published prices of eight providers on 4 November 2026, taking each one's entry plan at its smallest company size, for EU + UK cover where they publish it. Prices are converted to euros at the European Central Bank's reference rate of 3 November 2026.[2] Gabsor's Essential plan, for companies under $500k in revenue, is $79 a month, billed annually.

Published yearly prices of eight GDPR representative providers, with Gabsor's priceDot plot on a euro axis from €0 to €1,500. P1: €348 a year, EU price; no EU + UK price published. P2: from €390 a year, EU and UK. P3: €420 a year, EU price; no EU + UK price published. P4: €490 a year, EU price; no EU + UK price published. P5: €588 a year, EU and UK. P6: €1,103 a year, EU and UK. P7: from €1,140 a year, EU price; no EU + UK price published. P8: €1,425 a year, EU and UK. Gabsor: $948 a year, about €848, EU and UK.€0€300€600€900€1,200€1,500Gabsor $948 / yr
  • Provider, EU + UK price
  • EU only (no EU + UK price published)
  • Gabsor Essential, $79/month billed annually
Figure 1. Published yearly prices of eight providers, entry plan, EU + UK cover, converted at the ECB rate of 3 November 2026. Gabsor's price is shown for comparison.

You can pay less than Gabsor. Two of the eight publish an EU + UK price below Gabsor's.

What do you get at each price?

Every representative, at any price, must be appointed in writing.[1] It must be established, meaning based, in an EU country where the people you serve or monitor are.[1] Authorities and the people whose data you hold (data subjects) must be able to contact it instead of you, or as well as you.[1] It must also keep your record of processing activities (ROPA) "where applicable" and show it to an authority that asks.[1]

What you get at each price: the three cheapest providers, the other five, and Gabsor Essential
What you getCheapest providersMid-range providersGabsor Essential
Yearly price, EU + UKCheapest providers: From €390; 2 of 3 publish no EU + UK price (EU price €348–€420)Mid-range providers: €588–€1,425; 2 of 5 publish no EU + UK price (EU price €490–€1,140)Gabsor Essential: $948 ($79 × 12)
EU and UK in one planCheapest providers: 2 of 3 sell the UK separately or as an add-on; 1 does not sayMid-range providers: 2 of 5 show one price for both; 2 sell the UK separately; 1 does not sayGabsor Essential: One plan, from GAB COMPLIANCE LTD in Dublin and London
Requests from people and authoritiesCheapest providers: 1 of 3 caps forwarded requests at 10 a year; 2 of 3 state no per-request feeMid-range providers: 1 of 5 sells handling of people's data requests as an add-on; 4 do not sayGabsor Essential: Included on every plan, subject to fair use; no per-request fees
Who deals with an authority's letterCheapest providers: Not statedMid-range providers: Not statedGabsor Essential: Handled by the Gabsor team
Letter of appointment and certificateCheapest providers: 2 of 3 state a designation letter; 1 of 3 also a certificateMid-range providers: Not statedGabsor Essential: Both, in about five minutes
Privacy-notice wordingCheapest providers: 1 of 3 includes it; 2 do not sayMid-range providers: Not statedGabsor Essential: Included
ROPA toolCheapest providers: Not statedMid-range providers: Not statedGabsor Essential: ROPA builder; made available to authorities on request
Price at renewalCheapest providers: 1 of 3 is cheaper from year two; 2 of 3 renew automaticallyMid-range providers: 1 of 5 renews automatically; 1 changes price if you move up a size band; 3 do not sayGabsor Essential: No change during a term; any change from the next renewal, with notice
Setup feeCheapest providers: 2 of 3 state none; 1 does not sayMid-range providers: 1 of 5 states none; 4 do not sayGabsor Essential: No setup fee listed; one flat subscription
“Cheapest” is the three lowest-priced of the eight; “mid-range” is the other five. The ranking uses each provider's EU + UK price, or its EU price where it publishes no EU + UK price. Provider prices are in euros at the ECB rate of 3 November 2026; one is a monthly price × 12, and not every provider says whether its prices include VAT. Compare Gabsor's three plans on the pricing page.

Also ask about exit terms: a plan may renew automatically unless you give notice, such as a month ahead. Miss it, and you pay for another year.

What does it cost not to appoint one?

Not appointing a required representative can bring a fine of up to €10 million. For a business, the cap is 2% of its worldwide turnover (revenue) in the previous financial year, if that is higher.[1] In the UK, the cap is £8.7 million or 2%.[5][6] In our view, the real exposure for a small company is the enforcement process rather than the maximum: letters with deadlines, orders to put things right, and your time. One published case: on 12 May 2021, the Dutch data protection authority announced a €525,000 fine against LocateFamily.com for having no EU representative.[7]

When is it free or cheaper?

In our view, a representative costs nothing only when you do not need one. A company is exempt only if what it does with personal data meets all three of these conditions:[1]

  1. It is occasional.
  2. It includes no large-scale use of especially sensitive data, such as health data, or of criminal-conviction data.
  3. It is unlikely to put people's rights at risk.

The EDPB says your use of data is occasional only if it is not regular and falls outside the normal course of your business.[4] A product people in the EU use every month is not occasional, however few they are. Collecting emails once for a prize draw at a single event, then deleting them, could be. See who is exempt for the full test.

Early-stage startups can apply to Gabsor's Startup Program for reduced rates.

What does Gabsor charge?

Gabsor's pricing has three GDPR plans, set by yearly revenue. The card below shows Essential, billed annually. On monthly billing with no commitment, it is $99 a month; the pricing page lists other terms. Professional and Business are $159 and $279 a month, billed annually.

If you hold more than one type of appointment with Gabsor (GDPR, AI Act, Digital Services Act or Data Act), the highest-priced one is charged in full and each further one's recurring fee is reduced by 20%. EU and UK GDPR cover count as one appointment. Setup and documentation-review fees are not discounted.

GDPR Essential plan

$79per month

Billed annually. Excl. VAT.
For companies under $500k in revenue.

See pricingHow the service works

Set up in about five minutes. Companies and individuals can both sign up.

What's included

  • EU and UK representative, letter of appointment, certificate
  • Privacy-policy wording and compliance badge
  • Data-subject and authority requests included, no per-request fees (fair use)
  • Email and chat support
See everything in the plan
Early-stage, or no company yet? Ask about the Startup Program

Prices in USD excl. VAT. VAT is added at checkout where applicable; VAT-registered EU and UK businesses enter their VAT number and are charged under the reverse-charge mechanism.

Westartups

Reduced monthly rate, the full platform, and a real person to ask.

  • Companies and solo builders
  • Full platform included
Apply to the program

Frequently asked questions

Yes, if it meets the law. It must be appointed in writing, based in an EU country where the people you serve or monitor are, and reachable by authorities and those people. The GDPR rule that creates the role sets no registration, approval or fee for appointing one. In our view, providers differ in service, not validity.

You need a UK representative if you serve or monitor people in the UK, have no base there and are not exempt. Whether that means a second fee depends on the provider: some sell the EU and the UK in one plan, others charge per appointment, sometimes with a discount.

Sometimes. Several providers we reviewed bill yearly only. Where a provider publishes both, monthly billing costs more per month. Yearly plans are usually paid up front, and several renew automatically, so check the refund and notice terms before you sign.

No. Appointing a representative leaves your responsibility for your own compliance with you, whatever you pay. Action can still be taken against you directly. So compare quotes on what the service includes; no price moves your risk to the representative.

Sources

  1. Regulation (EU) 2016/679 (GDPR), Articles 13(1)(a), 14(1)(a), 27, 30(1), 30(2), 30(4) and 83(4)eur-lex.europa.eu
  2. European Central Bank – Euro foreign exchange reference rates (rates of 3 November 2026)ecb.europa.eu
  3. UK GDPR, Articles 3(2) and 27 (legislation.gov.uk, revised version)legislation.gov.uk
  4. EDPB Guidelines 3/2018 on the territorial scope of the GDPR (Article 3), version 2.1, section 4edpb.europa.eu
  5. UK GDPR, Article 83(4) (legislation.gov.uk, revised version)legislation.gov.uk
  6. Data Protection Act 2018, section 157 (legislation.gov.uk)legislation.gov.uk
  7. Autoriteit Persoonsgegevens (Dutch data protection authority) – press release on the LocateFamily.com fine (12 May 2021)autoriteitpersoonsgegevens.nl

Related articles

Who needs one

Do US companies need an EU GDPR representative?

Most US companies with EU customers or users must appoint one under Article 27. When it applies, the narrow exemption, and what happens if you skip it.

8 min read · Updated

ShareLinkedInX