EDPS & EDPB supportive of plan to simplify record-keeping GDPR rules
08/05/2025 | EDPS
The European Data Protection Supervisor (EDPS) and European Data Protection Board (EDPB) have adopted a joint letter to the European Commission regarding its draft proposal to simplify the record-keeping obligations for organisations with fewer than 500 employees under Article 30(5) of the EU General Data Protection Regulation (GDPR). The current limit is set to organisations employing under 250 employees.
The letter is a response to a communication by the Commission on 6 May 2025, outlining its plans for targeted modifications to the GDPR. The EDPB and EDPS noted that they expect a formal consultation process will follow the publication of the proposed legislative changes.
In their preliminary assessment, the EDPB and EDPS expressed support for this focused simplification initiative, highlighting that it should not impact the existing obligations of controllers and processors to adhere to other aspects of the GDPR. However, they urged the Commission to conduct a more thorough evaluation of the potential impact of the change, including an assessment of whether the draft proposal achieves a proportionate and equitable balance between safeguarding personal data and accommodating the interests of organisations with fewer than 500 employees.
What is this page?
You are reading a summary article on the Privacy Newsfeed, a free resource for DPOs and other professionals with privacy or data protection responsibilities helping them stay informed of industry news all in one place. The information here is a brief snippet relating to a single piece of original content or several articles about a common topic or thread. The main contributor is listed in the top left-hand corner, just beneath the article title.
The Privacy Newsfeed monitors over 300 global publications, of which more than 6,250 summary articles have been posted to the online archive dating back to the beginning of 2020. A weekly roundup is available by email every Friday.