Funnily enough, GDPR explicitly requires you to have a representative (which for many companies will take the form of a lawyer).

https://gdpr-info.eu/art-27-gdpr/