Cross-border branding agency work for EU and US clients

What to take away

What changed for UK agencies serving EU and US clients after Brexit

Before 2021 a UK studio could treat an EU client much like a domestic one. Data moved under EU rules, VAT followed EU rules, and a contract signed in London was enforced across the bloc without much thought. That ended when the transition period closed.

The UK now sits outside the EU's data protection framework. It holds an adequacy decision from the European Commission, which lets personal data flow from the EU to the UK without extra paperwork.

That decision is not permanent. It carries a fixed expiry date, it is reviewed before each renewal, and it can be suspended, so a studio that treats it as settled is taking a risk it does not need to take.

On tax, the UK left the EU VAT area. Distance selling rules, the mini one stop shop and reverse charge mechanics all changed for UK suppliers. A branding agency invoicing a German client now applies different logic from one invoicing a Texas client.

On contracts, EU jurisdiction rules no longer bind the UK in the same way. English courts still enforce English contracts, and English law remains a popular choice for international commercial work. But a client in France or New York may push for their own law, and the negotiation matters more than it used to.

None of this makes EU or US work harder to win. It makes the paperwork harder to improvise. Studios that quote before they scope the three regimes tend to absorb costs they never priced.

If you are unsure which domestic obligations sit alongside the cross-border ones, which UK rules apply sets out each authority and what it covers.

International data transfers and the safeguards agencies can use

A branding agency holds personal data constantly: client contact lists, consumer research panels, focus group recordings, CRM exports and website analytics. When any of that moves to or from the EU or the US, transfer rules apply.

The ICO publishes the working guidance for UK organisations, and it is the document to read before you design a research project that spans borders. The International transfers | ICO guidance covers the transfer mechanisms, the risk assessment and the extra safeguards required when a destination country lacks adequacy.

Start by being clear about your role. Are you a controller, deciding why personal data is processed, or a processor, acting on the client's instructions? Most agency work is processor work, but brand tracking, audience research and campaign measurement can tip you into controller territory.

The Controllers and processors | ICO guidance explains how the roles divide and what each one owes.

The role matters commercially. A controller carries more obligation, and a client will expect you to say which you are in the contract. Getting this wrong is one of the most common cross-border disputes.

For transfers to the EU, the UK adequacy position usually means no extra mechanism is needed. For transfers to the US, the picture is more layered: the UK Extension to the EU-US Data Privacy Framework allows UK organisations to send personal data to certified US companies without a separate transfer mechanism, provided the recipient is on the certified list. That list is not held by the ICO. The International Trade Administration, part of the US Department of Commerce, administers the framework and publishes the authoritative Data Privacy Framework List.

Where no adequacy or framework applies, you need a safeguard. The common ones are:

Two practical points decide whether this is cheap or expensive. First, map the data before the project starts, not after. Second, keep the mapping current. A purpose map is more useful than a policy document that nobody reads.

VAT treatment for EU and US client work

VAT on cross-border agency work turns on two questions: is the client in business, and where do they belong? For business to business services, the general rule is that the place of supply is where the customer belongs. That means a UK agency invoicing a business client in France or Germany usually does not charge UK VAT.

The client accounts for the tax under the reverse charge in their own country. Your invoice needs to say so, and it needs the client's VAT number on it. Without a valid VAT number, HMRC may treat the supply as one where UK VAT applies.

US clients are different, and simpler in one sense. The US has no federal VAT, and a UK agency invoicing a US business client normally treats the supply as outside the scope of UK VAT, again on the place of supply rule. The invoice should state that no UK VAT is charged and why.

That is not the end of US tax. Individual states levy sales tax, and since the South Dakota v. Wayfair decision most states claim economic nexus over out-of-state sellers. Whether a UK agency has to register depends on the state and on whether the deliverable is taxable there, so check the state's department of revenue rather than assuming the whole engagement sits outside US indirect tax.

Consumer clients are the exception. If the customer is not in business, different rules apply, and digital or remotely supplied services can pull you into the client's country, where a non-Union One Stop Shop (OSS) registration reports and pays the EU VAT due on those sales through a single return. Branding work is usually bespoke professional service rather than a digital supply, but campaign assets, hosted tools and subscription deliverables can blur the line.

Domestic work is unaffected. If the client belongs in the UK, UK VAT applies at the standard rate, 20% since 4 January 2011. The VAT rates on different goods and services - GOV.UK guidance lists the current rates and the categories they cover.

Three operational habits keep this clean. Confirm the client's VAT number and business status before you quote. Put the VAT position on the proposal, not just the invoice. And keep the evidence, because HMRC can ask years later.

Making Tax Digital applies to VAT registered businesses, so your records need to be digital and your software compatible. If you are budgeting a cross-border engagement, VAT treatment in agency budgeting covers how the tax position feeds into the fee.

Contract differences: governing law, IP and liability

Governing law decides which country's rules a court applies. Jurisdiction decides which court hears the case. They are separate choices, and they can point to different countries, though that is rarely wise. English law and English courts are a common default for UK agencies, and they are widely respected for commercial work.

An EU or US client may ask for their own law instead. That is a commercial negotiation, not a legal technicality.

Enforcement is a separate question again. Under the 2005 Hague Convention on Choice of Court Agreements, which links the UK and most EU member states, an exclusive English jurisdiction clause makes an English judgment enforceable in the other contracting states. Without an exclusive jurisdiction clause, that route is not open.

Intellectual property is the clause clients care about most. Branding work creates copyright in logos, copy, imagery, motion and design systems. Copyright arises automatically on creation, but ownership does not transfer automatically. The Intellectual property: Copyright - GOV.UK guidance sets out the basics of how copyright works and what protection covers.

For agency work, the practical points are these. Assign the rights the client needs, on payment, and keep the rest. Say whether the agency retains the right to show the work in a portfolio. Name any third party assets, such as fonts or stock imagery, and the licence terms attached to them.

For US clients, two local rules sit on top of that. US copyright treats work created by an employee within the scope of employment as a work made for hire, so the employer rather than the creator is the author. For commissioned design work, an express written assignment is the safer route, because only certain categories of commissioned work can be treated as made for hire. Registration with the US Copyright Office is not what creates the copyright, but it is needed before an infringement claim can be filed in a US court.

Confirm who owns working files and layered source documents.

Liability caps matter more across borders because the sums at stake are larger. A cap tied to fees paid is standard. Exclude indirect and consequential loss. Be explicit about which deliverables carry warranties and which do not.

Termination, notice periods and payment terms should follow the same logic: state them plainly, in the currency of the contract, with a named payment route. Currency risk is real on long engagements, and a client in New York paying in dollars over twelve months is exposed to movement that a UK client is not.

The commercial contract clauses worth settling before work starts are set out in more detail there. Settle them at proposal stage, because retrofitting an IP assignment after launch is a negotiation you will lose.

Scoping a cross-border engagement before the quote

Most margin lost on international work is lost at quoting. The fix is a scoping sequence that runs before the number goes out. Work through it in this order.

Steps two and three — the transfer route and the VAT position — are the ones agencies skip, and they are the ones that cost money later. A research project that sends panel data to a US analytics provider needs a transfer check before the fieldwork is booked, not after.

Scoping also decides the delivery model. A fixed project suits a defined brand refresh. A retainer suits ongoing campaign work. Embedded branding agency models suit clients who want a team inside their organisation, and they raise harder questions about data access and IP ownership.

A worked example makes the cost visible. A Manchester studio wins a rebrand for a business client in the Netherlands, with consumer research run through a US platform.

That last line is the difference between a profitable international job and a favour. Clients accept it when it is explained as part of the scope.

Named regulations to track as the rules move

Cross-border rules change, and the changes are rarely announced to agencies directly. Track these by name.

UK GDPR and the Data Protection Act 2018. The core domestic data regime. The ICO enforces it and publishes the transfer guidance.

The EU adequacy decision for the UK. Reviewed periodically and can be withdrawn. Its status decides whether EU to UK data flows stay frictionless.

The UK Extension to the EU-US Data Privacy Framework. Lets UK organisations send personal data to certified US companies without a separate mechanism. The certified list changes, so check it per project.

The International Data Transfer Agreement and the Addendum to the EU Standard Contractual Clauses. The ICO's approved safeguards for transfers without adequacy.

UK VAT law, including the place of supply rules and Making Tax Digital. HMRC sets the rates and the digital record keeping requirements.

The Copyright, Designs and Patents Act 1988. The statute behind copyright ownership and assignment. The IPO administers the wider IP system.

The Rome I and Rome II Regulations, as retained UK law. These govern which law applies to contractual and non-contractual obligations in cross-border disputes.

The Electronic Commerce (EC Directive) Regulations 2002, as retained. Relevant where agency work includes online services and information society services.

Beyond the law, watch the bodies that shape practice. The Advertising Standards Authority polices campaign claims that run in UK media. The Competition and Markets Authority covers market conduct. Professional bodies such as the IPA, the DBA and the CIM publish sector guidance.

Companies House records the entity details you need for contracting, and the Office for National Statistics publishes the market data behind many client briefs.

A quarterly check is enough for most studios. Read the ICO transfer pages, check the HMRC VAT guidance, and confirm the adequacy position has not moved. Put a named person on it, because a shared responsibility is no responsibility.

On the EU side, the client's own regime is the EU GDPR, Regulation (EU) 2016/679, supervised by each member state's data protection authority, with the European Data Protection Board issuing guidance that keeps those authorities consistent. EU VAT on the client's side follows the EU VAT Directive, Council Directive 2006/112/EC, as applied by the client's country.

What EU and US clients should ask a UK branding agency

The same three regimes give an EU or US business a short list of questions when it shortlists a UK branding agency. A studio that answers them in the proposal has usually done cross-border work before.

An agency that cannot answer these at proposal stage is likely to price the compliance work later, as a change request.

Common questions