In March 2025, the Commission proposed targeted amendments to GDPR to reduce compliance costs, especially for SMEs. This includes easing record-keeping obligations and clarifying definitions of SMEs and “small and micro companies” (SMCs). The estimated savings amount to €300 million annually. Still, the proposal keeps safeguards for high-risk processing.
🔗 European Commission – Data protection rules
CNIL outlines obligations for health professionals conducting internal research
CNIL reminds health establishments that internal research must follow data‑protection rules, including lawful bases, safeguards, and impact assessments.