info@edpo.com
PRICING
Our Pricing
10% on the second representative
20% on the third representative
EDPO’s fees for data protection representative services are tailored to your company’s specific needs. Here’s a list of our indicative fees:
| 0-50 Employees | 51-250 Employees | 251-500 Employees | 500+ Employees |
| 145 €/mo | 250 €/mo | 450 €/mo | Tailored pricing |
| Get a Quote | Get a Quote | Get a Quote | Get a Quote |
| 0-50 Employees | 51-250 Employees | 251-500 Employees | 500+ Employees |
| £83 /mo | £155 /mo | £260 /mo | Tailored pricing |
| Get a Quote | Get a Quote | Get a Quote | Get a Quote |
| 0-50 Employees | 51-250 Employees | 251-500 Employees | 500+ Employees |
| CHF 145 /mo | CHF 250 /mo | CHF 450 /mo | Tailored pricing |
| Get a Quote | Get a Quote | Get a Quote | Get a Quote |
The fees are payable in upfront annual payments.
Our Pricing
20% on the third representative appointed
EDPO’s fees for GDPR representative services are tailored to your company’s specific needs.
| 0-5 Employees | 51-100 Employees | 251-500 Employees | 500+ Employees |
|---|---|---|---|
| No Large Scale Processing |
No Large Scale Processing |
No Large Scale Processing |
Large Scale Processing Financial Institutions Other complex processing activities |
| 145 €/mo | 250 €/mo | 450 €/mo | Contact Us |
| Get a Quote | Get a Quote | Get a Quote | Get a Quote |
Small Companies
| 0-5 Employees | 51-100 Employees | 251-500 Employees | 500+ Employees |
|---|---|---|---|
| No Large Scale Processing |
No Large Scale Processing |
No Large Scale Processing |
Large Scale Processing Financial Institutions Other complex processing activities |
| £83 /mo | £155 /mo | £260 /mo | Contact Us |
| Get a Quote | Get a Quote | Get a Quote | Get a Quote |
| 0-50 Employees | 51-250 Employees | 251-500 Employees | 500+ Employees |
|---|---|---|---|
| CHF 200 /mo | CHF 325 /mo | CHF 550 /mo | Contact Us |
| Get a Quote | Get a Quote | Get a Quote | Get a Quote |
Additional fees may apply in case of processing of sensitive data.
The fees are payable in upfront annual payments.
How much does it cost to appoint EDPO as your company’s Data Protection Representative?
Our Data Protection Representative fees are based on the size of your company (in terms of number of employees), the type of data (regular data and/or sensitive data) that your company processes, whether or not your company’s processing operations require regular and systematic monitoring of individuals in the EU and/or UK and/or Switzerland, and whether your company processes personal data on a large scale.
How much does it cost to designate EDPO as your company’s GDPR Data Protection Representative in the EU?
What is personal data ?
Personal data under the GDPR has a very broad interpretation and includes any information that relates to an identified or identifiable natural person: name, pictures, addresses, phone numbers, e-mail addresses, IP addresses (even dynamic), identification numbers, location data, age, origins, pseudo, etc.
What is sensitive data ?
Sensitive data is personal data that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or a natural person’s sex life or sexual orientation.
What is considered to be processing “on a large scale”?
The GDPR does not define what constitutes “large scale” processing but guidelines on the interpretation of the GDPR recommend that the following factors be considered when determining whether the processing is carried out on a large scale :
-the number of individuals concerned – either as a specific number or as a proportion of the relevant population
-the volume of data and/or the range of different data items being processed
-the duration, or permanence, of the data processing activity
-the geographical extent of the processing activity
Examples of large-scale processing include :
-processing of patient data in the regular course of business by a hospital
-processing of travel data of individuals using a city’s public transport system (e.g. tracking via travel cards)
-processing of real time geo-location data of customers of an international fast food chain for statistical purposes by a processor specialised in providing these services
-processing of customer data in the regular course of business by an insurance company or a bank
-processing of personal data for behavioural advertising by a search engine
-processing of data (content, traffic, location) by telephone or internet service providers
Examples that do not constitute large-scale processing include :
-processing of patient data by an individual doctor
-processing of personal data relating to criminal convictions and offences by an individual lawyer
The Swiss Authority defines large scale: “The term “large-scale” refers to cases where data is not simply processed in an isolated way. For example, a medical practice or hospital might process patient data. On the other hand, the isolated processing of the data of an employee who is absent due to illness by a company does not constitute large-scale processing. Large-scale processing occurs in particular when the processing of sensitive data constitutes the essential part of the activities of the person or body in question.”
What is personal (regular) data?
Personal data under the GDPR has a very broad interpretation and includes any information that relates to an identified or identifiable natural person: name, pictures, addresses, phone numbers, e-mail addresses, IP addresses (even dynamic), identification numbers, location data, age, origins, pseudo, etc.
What is sensitive data ?
Sensitive data is personal data that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or a natural person’s sex life or sexual orientation.
What is considered to be processing “on a large scale"?
The GDPR and UK GDPR do not define what constitutes “large scale” processing but guidelines recommend that the following factors be considered when determining whether the processing is carried out on a large scale:
- The number of individuals concerned – either as a specific number or as a proportion of the relevant population
- The volume of data and/or the range of different data items being processed
- The duration, or permanence, of the data processing activity
- The geographical extent of the processing activity
Examples of large-scale processing include:
- processing of patient data in the regular course of business by a hospital
- processing of travel data of individuals using a city’s public transport system (e.g. tracking via travel cards)
- processing of real time geo-location data of customers of an international fast food chain for statistical purposes by a processor specialised in providing these services
- processing of customer data in the regular course of business by an insurance company or a bank
- processing of personal data for behavioural advertising by a search engine
- processing of data (content, traffic, location) by telephone or internet service providers
Examples that do not constitute large-scale processing include:
- processing of patient data by an individual doctor
- processing of personal data relating to criminal convictions and offences by an individual lawyer
The Swiss Authority defines large scale: “The term "large-scale" refers to cases where data is not simply processed in an isolated way. For example, a medical practice or hospital might process patient data. On the other hand, the isolated processing of the data of an employee who is absent due to illness by a company does not constitute large-scale processing. Large-scale processing occurs in particular when the processing of sensitive data constitutes the essential part of the activities of the person or body in question.”)
Our Services
The following services are all included in our packs:
Alerts on the relevant GDPR- and data protection-related news and developments regarding your company’s compliance with the EU & UK GDPR and the Swiss Data Protection Law
They Trust Us
Frequently Asked Questions
Check our FAQ page for more questions and answers.
Will I receive a tailored fee quote?
Yes. The prices listed are indicative fees. We will tailor our fees to your company’s situation.
Do I get a discount if I appoint EDPO as more than one Representative?
Yes. You will get 10% off on the second representative appointed and you will get 20% off on the third representative appointed.
What if I'm a very small start-up with almost no budget?
Please contact us. We have many one-person startups and very small companies as clients. We always tailor our offer to the company’s situation and we understand that budget can be tight for startups.