On 8 July 2025, the Plenary of the European Data Protection Board (EDPB) took place, online, during which the EDPB-EDPS Joint Opinion 01/2025 on the Proposal for a Regulation on simplification measures for SMEs and SMCs, in particular the record-keeping obligation under Art. 30(5) GDPR was adopted

The proposal aims to amend Article 30(5) of the GDPR, in the sense that the derogation from the obligation to keep records of data processing operations should apply to an enterprise with no more than 750 employees, except where the processing operation carried out is likely to result in a high risk to the rights and freedoms of natural persons, within the meaning of Article 35 of the GDPR.

More information is available at: https://edpb.europa.eu/news.

Legal and Communication Department

A.N.S.P.D.C.P