What EU Presence does as your representative
The role each mandate gives us, what we do with letters from authorities, and what stays with you.
Signing a register's mandate appoints EU Presence to the role that register's statute defines. Here is what that role is, what we do in the platform, and what remains yours.
The role under each statute
| Register | What the statute says the role is |
|---|---|
| Privacy | The representative is addressed, in addition to or instead of you, by supervisory authorities and data subjects on all issues related to processing (GDPR Article 27(4)). |
| Content Safety | The legal representative is addressed by the Member States' competent authorities, the Commission and the Board on all issues necessary for the receipt of, compliance with and enforcement of decisions under the DSA (Article 13(2)). |
| Cyber Resilience | You fall under the jurisdiction of the Member State where your representative is established (NIS 2 Article 26(3)). |
| AI Governance | The mandate empowers the authorised representative to carry out the tasks in Article 22(3) of the AI Act, such as keeping your documentation at the competent authorities' disposal and answering their reasoned requests, and to be addressed by them on all issues of compliance. It provides a copy of the mandate to market surveillance authorities on request. |
| Product Safety | The responsible person is the economic operator in the Union responsible for the tasks in Article 4(3) of Regulation (EU) 2019/1020: where a declaration of conformity and technical documentation are required, verifying that they have been drawn up; providing information on a reasoned request; informing market surveillance authorities of a risk; and cooperating on corrective action (GPSR Article 16(1)). |
What we do in the platform
- We hold the signed mandate, which is also filed in your Documents.
- Our contact details sit on each register's Reachable card, with a snippet for you to publish. See Publish your representative's details.
- We log each letter an authority sends us about you on the register's Representative tab, and tell you by notification and email.
- We review the answer you hand over and transmit it to the authority in your name, record the date it went and, where we keep one, file a copy of the reply as sent.
- We close each letter when the matter is finished, and tell you.
The steps on your side are in Answer a letter from an authority.
What stays with you
- The substance of every answer is yours: you write it, and on a DSA order you state whether and when effect was given.
- Answering data subject requests is yours, on the Privacy register's Requests tab. See Handle a privacy request.
- Your obligations stay yours. Under GDPR Article 27(5) and NIS 2 Article 26(4), designating a representative is without prejudice to legal actions against you. DSA Article 13(3) lets a legal representative be held liable for non-compliance, without prejudice to the liability of, and legal actions against, the provider.
Cyber Resilience incidents follow their own process; see reporting an incident.
When a register closes
If a register's subscription goes unpaid, is paused or ends, the register closes: its tabs lock, its Representative tab shows the locked page in place of the letters, and its public parts come off your Privacy Center. The signed mandate stays on file, and paying up or subscribing again reopens the register. See Open a register.