Co-founder Kelly Logan and Managing Director Anna Levitina explain how Kanto Representation Services helps businesses based outside the European Union (EU) comply with the requirement to appoint a legal representative within the EU.
Kelly, what does Kanto do, and why was it formed?
Kelly: Kanto was created to support companies doing business in the EU that don’t have a physical presence there. EU laws, such as the General Data Protection Regulation (GDPR), the Digital Services Act (DSA) – and soon the AI Act – require businesses not physically present in the EU to appoint a legal representative there.
The legal representative serves as a local point of contact for regulators and users, facilitating communication, compliance oversight and the exercise of legal rights. In mandating a physical presence within the EU, these regulations ensure that foreign companies are subject to EU jurisdiction and can be held accountable for their obligations, even if they have no physical operations within EU borders.
We saw a growing demand from clients needing this service and so we launched Kanto to meet that need.
Anna, congratulations on your appointment as Managing Director of Kanto. Can you tell us a bit about your background?
Anna: I’m a commercial and technology lawyer with a focus on data protection and new technologies. I’m certified by the International Association of Privacy Professionals (Europe), and I help companies understand how regulations like the GDPR and upcoming AI Act apply to real-world products and services. I also advise on software-related contracts and European public procurement law.
Alongside my legal practice, I’m pursuing a PhD at the Autonomous University of Barcelona, researching how decisions made by automated systems, such as AI, are regulated, and what protections exist for individuals. This academic work directly informs my practical advice to clients.
Anna, how would you summarise how Kanto supports non-EU businesses with EU data protection and digital laws?
Anna: We help businesses based outside the EU to comply with data and digital laws in the EU. We also do this for the UK and Switzerland, which have similar requirements. Each region requires a local representative under certain regulations, and Kanto provides that physical presence. This isn’t optional – it’s a legal requirement.
We also offer data protection officer services where needed. What sets us apart is that we tailor our support to the size and needs of each client, so we don’t apply a one-size-fits-all approach. Whether your business is a start-up or a large platform, we provide what’s relevant to you.
So Kanto can handle multiple jurisdictions?
Anna: Exactly. We provide legal representation services for the EU through our legal entity in Ireland, and through our sister companies we also provide this service for the UK and Switzerland. Clients benefit from a single point of contact, rather than coordinating with multiple firms across jurisdictions.
With the introduction of the Digital Services Act in 2022, what challenges are non-EU businesses facing?
Kelly: The DSA affects online businesses offering intermediary services, like content sharing platforms, marketplaces or internet service providers. It imposes new obligations around content moderation and user transparency. One of those obligations is appointing a legal representative in the EU, which is where Kanto comes in.
We consolidate representation requirements under the GDPR, the DSA, the upcoming AI Act and also Swiss and UK data protection laws, offering a single legal representative solution. Without Kanto, companies might need to establish their own EU office just to meet these requirements.
And what are the risks of non-compliance?
Anna: Fines are the biggest risk, and they’re substantial. Under the GDPR, fines can reach €20 million or 4% of global turnover. The DSA allows fines of up to 6% of global turnover, and the AI Act allows up to €15 million or 3%, depending on the violation.
One common mistake is neglecting to appoint a legal representative. Businesses often focus on operational requirements, such as privacy notices and security measures, but they overlook the requirement to have a legal representative, and regulators do enforce this. For example, Clearview AI, a US facial recognition firm, was fined €600,000 for failing to appoint a legal representative. Another platform, locatefamily.com, was fined €525,000 for the same thing.
What differentiates Kanto from other companies providing legal representative services?
Kelly: Everyone at Kanto is a qualified lawyer. We’ve studied digital and tech law extensively, and we have advanced degrees in this field. I completed a Master’s in tech law during COVID, and Anna is doing her PhD on automated decision making and AI. Our colleague, Isadora Werneck, has a Master’s in digital law. We stay up to date and provide legally informed representation. That sets us apart from firms offering purely administrative representation, without legal grounding.
Anna, what kind of ongoing support do clients receive from Kanto?
Anna: We stay engaged, offering regular check-ins, flagging relevant regulatory updates and providing operational guidance. Clients tell us we feel like an extension of their internal team, and that’s intentional on our part.
If clients need actual legal advice, Kanto does not provide this. However, we can provide this through our sister company Logan & Partners, which is a law firm advising on tech, digital and data laws in Switzerland, the UK and the EU.
For non-EU companies planning to enter the EU digital market, what are the key legal steps should they take?
Anna: First, appoint a legal representative in the EU, UK or Switzerland, wherever you operate. Then, identify sector-specific regulations. If you’re in e-commerce, AI or health tech, you’ll likely have additional obligations under laws such as the DSA or AI Act.
You also need to prepare proper documentation, such as terms & conditions, privacy notices, processing records and user communications, and ensure compliance with consumer protection laws. It’s a regulated environment and businesses must be proactive.
For companies used to the US or other markets, that sounds like a steep learning curve.
Anna: Absolutely. The EU is heavily regulated compared to many non-EU jurisdictions. Kanto solves the legal representative requirement from day one for the EU, Switzerland and the UK. We keep the required documentation, act as the local contact for regulators and ensure you’re meeting formal obligations.
If a business needs legal advice, then Logan & Partners (as a law firm) is happy to help.
You offer flexible pricing; can you elaborate on that?
Kelly: Our pricing reflects the size and complexity of the client’s business. On our website we list starting prices, but we tailor packages after a short complimentary consultation. It’s about providing value based on what’s actually needed, not selling extras a company doesn’t require.
And if someone isn’t sure whether they even need a legal representative?
Anna: We offer an initial 20-minute call, which you can book via our website.
It’s a convenient, free-of-charge way to learn if you need a legal representative and to understand what’s involved. We’re happy to guide companies at the exploratory stage.
