For operating your digital services in the UK – even without a physical presence
The UK Network and Information Systems Regulations 2018 (UK NIS) aim to raise the security level of network and information systems for essential services and digital services in the UK. This includes, amongst others, so-called Relevant Digital Service Providers (RDSPs), in particular:
- Online marketplaces
- Online search engines
- Cloud computing services
For digital service providers headquartered outside the UK who provide their services in the UK and meet the thresholds, the following applies:
- They are considered Relevant Digital Service Providers (RDSPs) within the meaning of the UK NIS if they exceed certain size or turnover thresholds.
- You must appoint a UK NIS representative in the United Kingdom and provide the Information Commissioner’s Office (ICO) with their name and contact details.
- The representative acts as a point of contact for the ICO and the NCSC and assists with fulfilling obligations under the UK NIS, including security incident reporting requirements.
Our role as your external UK NIS representative
Our specialists in information security, cyber resilience and regulatory affairs will act as your UK NIS representative, ensuring that requirements and enquiries from the UK are coordinated, dealt with in a timely manner and in your best interests.
Among other things, we offer:
- Acting as the official point of contact in the UK for the Information Commissioner’s Office (ICO) and the National Cyber Security Centre (NCSC) via our London office.
- Receipt, coordination and forwarding of notifications, requests for information and orders from the UK supervisory and security authorities in connection with UK NIS.
- Support in organising and meeting reporting and response deadlines for security-related incidents, including assessing whether an incident is reportable under UK NIS.
- Pragmatic recommendations for implementing UK NIS obligations (risk management, technical and organisational measures, monitoring, incident handling), tailored to your service model as an online marketplace, search engine or cloud service.
- Support in aligning UK NIS with existing information security frameworks (e.g. ISO 27001/ISMS) as well as with other regulations such as GDPR/UK GDPR or industry-specific requirements.
- A reliable point of contact who understands your business model, technical infrastructure and risk profile, and translates regulatory requirements into clear, actionable measures.
This allows you to focus on the growth and operation of your digital services. We take care of the operational implementation of the representative role and professional communication with the UK authorities.
Why choose the Swiss Infosec Group as your UK NIS representative?
- Many years of expertise in information security and cyber regulation, with a focus on NIS regimes (EU NIS/NIS-2 and UK NIS) as well as related legal frameworks such as the GDPR/UK GDPR.
- Experience with global digital business models regulated simultaneously across multiple jurisdictions (EU, UK and beyond), including the coordination of EU and UK representatives.
- Practical, risk-based advice rather than purely formal checklist compliance – with a focus on the availability, confidentiality and integrity of your services.
- Structured process models for the implementation and ongoing improvement of NIS-compliant processes (Governance, Risk & Compliance, Incident Management, Reporting).
- Clear responsibilities and short lines of communication – from the initial assessment through to ongoing representation and support during audits or enforcement proceedings.
Our goal: to design UK NIS compliance in such a way that you are legally compliant without losing your agility and scalability in the UK market.
Next steps
Please contact us for a no-obligation initial consultation. Together, we will clarify:
- Whether your company is classified as a Relevant Digital Service Provider under the UK NIS Regulations,
- whether you need to appoint a UK NIS representative, and
- how we can efficiently integrate the representative role into your existing governance, security and operational processes.
Let us take care of the role of UK NIS Representative so that you can offer your digital services in the UK securely, resiliently and in compliance with the law.