EU Proposes GDPR Record-Keeping Relief for SMEs
Dposphere
In May 2025, the European Commission announced plans to simplify GDPR compliance for small and medium-sized enterprises (SMEs) by extending reduced record-keeping requirements to companies with up to 750 employees (currently 250). This proposal aims to cut administrative burdens while still preserving core privacy protections such as transparency and accountability. SMEs often lack the resources for complex documentation obligations, so this change could make compliance more accessible. Businesses offering GDPR support or DPO-as-a-Service should stay ready to help clients navigate the revised requirements, balancing efficiency with robust data protection.
🔗 European Commission – Data Protection
Dposphere
Recent Post
The UK’s Information Commissioner’s Office has reprimanded ACRO, the Criminal Records Office, following cybersecurity failures involving
The European cybersecurity certification ecosystem is continuing to develop as organizations face growing pressure to demonstrate
The European Union Agency for Cybersecurity (ENISA) announced that it is expanding its role within the
