Skip to Primary Navigation

European Commission proposes GDPR simplification for small mid-cap companies

Telephone message about GDPR changes to privacy.
Photo: Getty Images

Proposal to extend exemptions from GDPR record-keeping.

On May 21, 2025, the European Commission adopted a new proposal aimed at simplifying compliance with the General Data Protection Regulation (GDPR) for small mid-cap companies (SMCs). The initiative intends to extend the derogations currently applicable to small and medium-sized enterprises (SMEs) to SMCs while maintaining the protection of individuals’ personal data.

Get full access, free for a month

Start your 28-day free trial to continue reading and access
all content on GRIP – no payment details required.

What’s included:

  • Every new article, plus our 5,000+ archive
  • Daily regulatory insight and guidance
  • Exclusive interviews and in-depth analysis
  • Coverage of industry-leading events and conferences
  • All podcasts and videos, featuring industry experts
  • The full set of Rules Navigator tools
  • An ad-free experience