For Professional Advisers
We hold the obligation. You keep the client.
Trust companies, fiduciaries, fund administrators, law firms and accountants in Jersey, Guernsey, the Isle of Man, Switzerland, Gibraltar and the UAE all share the same structural problem: your clients face EU and UK GDPR obligations — representative appointments, DPO roles — that your firm, sitting outside the EU and UK, cannot lawfully discharge for them.
We can. We are appointed behind your firm, deliver the obligation, and report to you. Your relationship with your client stays yours.
The gap we close
An EU Representative must be established in the EU. A UK Representative must be established in the UK. A DPO must be genuinely independent and accessible to European supervisory authorities. A firm in the Channel Islands, Switzerland, Gibraltar or the Gulf cannot hold any of those roles for its clients — however strong the client relationship. The usual outcome is that the client is sent to a stranger, and the adviser hopes the stranger behaves.
Our model removes that risk. Privacy Core Services is established on both sides of the line — Privacy Core Services Ltd in Malta (C 95774, inside the EU) and Privacy Core UK Ltd in the United Kingdom (Companies House 17350509) — so the representative and DPO appointments your clients need can be held properly, by one provider, verifiable on two public registers.
What we take on for your clients
EU and UK representation (Article 27)
The local contact point the GDPR and UK GDPR require of organisations with no establishment in the territory — held from our own EU and UK entities.
Outsourced DPO
The named, independent data protection officer role, held under a service contract with board-ready reporting your firm can put in front of the client.
Audits and gap analyses
Evidence-ready GDPR and UK GDPR audits — often the first deliverable when a client’s exposure is unclear.
DSAR handling
Intake, identity verification, search, redaction and defensible evidence when a data subject request lands on one of your clients.
How an engagement runs
You introduce the situation
A short conversation about the client's footprint — no client files needed at this stage. We tell you plainly whether an obligation exists and which one.
We are appointed, behind you
The engagement is scoped per client. We hold the appointment; you stay the client's trusted adviser and the channel for advice.
We deliver and report to you
Ongoing reporting comes to your firm in a form you can pass to the client or their board. Regulator contact is handled by us, with you informed.
Every arrangement is different and is agreed firm by firm — territory, client profile and reporting lines all vary, so we put nothing standard on this page. The right first step is a conversation.
Why advisers can put their name near ours
Both of our entities are on public registers — the Malta Business Registry (C 95774) and Companies House (17350509) — and both registration numbers are in the footer of every page on this site. Verify us first; then talk to us.