In May 2025, the European Commission announced plans to simplify GDPR compliance for small and medium-sized enterprises (SMEs) by extending reduced record-keeping requirements to companies with up to 750 employees (currently 250). This proposal aims to cut administrative burdens while still preserving core privacy protections such as transparency and accountability. SMEs often lack the resources for complex documentation obligations, so this change could make compliance more accessible. Businesses offering GDPR support or DPO-as-a-Service should stay ready to help clients navigate the revised requirements, balancing efficiency with robust data protection.
🔗 European Commission – Data Protection
CNIL outlines obligations for health professionals conducting internal research
CNIL reminds health establishments that internal research must follow data‑protection rules, including lawful bases, safeguards, and impact assessments.
JURCOM GRC
November 12, 2026
5:53 pm