Fines up to €20,000,000 or 4% of global turnover

Insights

Insights on EU representation and GDPR compliance

Enforcement news, how-to guides and deep dives on Article 27 GDPR and EU representation for companies based outside the EU.

A dark desk at night with a laptop showing an abstract legal document and a printed page with a fountain pen, lit by warm golden lamplight, representing writing a website privacy policy
GDPR Basics

Does Your Website Need a Privacy Policy? What Must Go in It

It is the least-read page on your website and the first one a regulator opens. Most sites legally need a privacy policy, most policies on the internet are copied from someone else, and both facts are fixable in under an hour.

Usantis Jul 6, 2026 5 min read
A dark data center corridor in deep navy blue, rows of server racks receding toward a warm golden light, representing the EU AI Act reaching non-EU technology companies
For US Companies

The EU AI Act Pushed Its Deadline to 2027, and Quietly Added a Third EU Representative

In mid-2026 the EU gave AI companies a gift that looks like breathing room: the biggest AI Act deadline moved from August 2026 to December 2027. For a company outside the EU, that extra time hides a requirement most have never heard of, and it is the same requirement they already met twice for other laws.

Usantis Jul 6, 2026 5 min read
A dark monitoring room with a large screen showing a glowing network graph of connected nodes, representing the trackers a website loads in the background
GDPR Basics

Cookie Audit: What Your Site Sets Before Anyone Clicks Accept

Your consent banner asks the question. Your website often does not wait for the answer. Here is how to find out what your site really sets before a visitor clicks anything, and what to do about the gap, because that gap is the most common cookie violation there is.

Usantis Jul 6, 2026 4 min read
A calendar and clock merged into one, ringed by the gold stars of the EU flag, illustrating the one-month GDPR response deadline for a data-subject request
DSARs

DSAR Deadlines: How Fast Must You Respond, and How Never to Miss One

When someone asks for their data, a clock starts. Most companies find out how long they had only after they have run out of it. Here is the deadline, in plain terms, and how to keep it from surprising you.

Usantis Jul 2, 2026 5 min read
A UK flag and an EU flag side by side in deep navy beneath a ring of golden stars, representing the separate UK and EU GDPR representative duties
GDPR Basics

The UK Has Its Own GDPR Now. Your EU Representative Does Not Cover It.

When the UK left the EU it kept the GDPR and made its own copy. Two regulations, two regulators, and for a lot of companies outside both, two separate representatives. Here is when the EU one you already have is only half the job.

Usantis Jun 26, 2026 6 min read
A map of the European Union in deep navy with a single golden location pin, beneath a ring of golden stars, representing where an EU representative must be based
GDPR Basics

Where Must Your EU Representative Actually Be Located?

Do you need a representative in every EU country, just in Ireland, or somewhere specific? The location question trips up almost everyone, and the real answer is simpler and cheaper than the myths suggest.

Usantis Jun 26, 2026 6 min read
A golden balance scale beside a stack of coins in deep navy, beneath a ring of golden EU stars, representing the cost of an EU representative
Pricing & Cost

How Much Does an EU Representative Cost in 2026?

One EU representative costs nine dollars a month, another costs five hundred, and they are not selling the same thing. Here is what you actually pay for, what the cheap tiers quietly leave out, and how to tell a fair price from a fine waiting to happen.

Usantis Jun 20, 2026 8 min read
Three glowing arched doorways in deep navy beneath a ring of golden EU stars, representing the EU representative, the DPO and privacy counsel
GDPR Basics

EU Representative vs DPO vs Privacy Counsel: Who Does What

Three roles, one expensive mix-up. The EU representative, the Data Protection Officer and outside privacy counsel sound interchangeable and are nothing of the sort. Here is who does what, and which one you actually need.

Usantis Jun 13, 2026 9 min read
A signpost with two arrows over the EU flag, representing the decision of whether a non-EU company needs a GDPR representative
GDPR Basics

Do I Need a GDPR Representative? The 5-Minute Answer

Half the companies that ask this question do not need a representative. The other half needed one a year ago and never noticed. Here is how to tell which half you are in, without a law degree.

Usantis Jun 8, 2026 7 min read
An open law book glowing beneath a ring of golden EU stars, representing Article 27 of the GDPR
GDPR Basics

GDPR Article 27 Explained in Plain English

Article 27 is one short paragraph that quietly creates a legal obligation for thousands of companies that have never set foot in Europe. Here is what it says, in language a human can actually use.

Usantis Jun 8, 2026 8 min read
Shipping boxes on a conveyor in a dark warehouse with the EU flag in the background, representing Amazon sellers shipping to European customers
Marketplace Sellers

Amazon Made You Get an EU Responsible Person. It Never Mentioned the Other One.

In December 2024, Amazon blocked thousands of non-EU sellers until they named an EU responsible person for product safety. Most sellers think that solved their EU representative problem. It solved a different problem. The data one is still open, and no listing block will ever warn you about it.

Usantis Jun 7, 2026 8 min read
A laptop showing an advertising dashboard next to the EU flag, representing Google Ads campaigns targeting Europe
For US Companies

Do You Need an EU Representative for Google Ads?

You set your Google Ads campaign to target Germany and France, and suddenly Google is asking questions about Europe you have never heard before. Here is what actually requires an EU representative, and what does not.

Usantis Jun 6, 2026 7 min read
A gavel beside the EU flag, representing GDPR enforcement against non-EU companies
Enforcement & Fines

GDPR Enforcement Against Non-EU Companies: Who Actually Gets Fined

EU regulators have handed a single US company over €100 million in fines without it ever opening an EU office. Here is who really gets caught, and why a missing EU representative is the first thing investigators notice.

Usantis Jun 5, 2026 8 min read

Stay off the enforcement tracker.

See whether Article 27 applies to you in about a minute, then set up your EU representative.