Modifications of the GDPR: EDPB & EDPS welcome simplification of record keeping obligations and request further clarifications
The European Data Protection Board (EDPB) and European Data Protection Supervisor (EDPS) issued a Joint Opinion on the European Commission’s Proposal for a Regulation amending certain regulations, including the GDPR . The Proposal, part of the fourth simplification Omnibus, aims to simplify EU rules and reduce administrative burden, extending certain mitigating measures available for small and medium sized enterprises (SMEs) to small mid-cap enterprises (SMCs), and includes further simplification measures. The Proposal aims to modify Art.30 (5) GDPR, providing a derogation to the obligation to keep a record of data processing operations. Currently, this derogation only applies to enterprises and organisation under 250 employees, except in certain cases. Under the Proposal, the derogation would apply to an enterprise or organisation employing fewer than 750 people, unless the processing operation carried out is likely to result in a high risk to individuals’ rights and fr...