DATA PROTECTION | EDPB and EDPS issue joint opinion on proposed GDPR amendments

On 9 July 2025, the European Data Protection Board (EDPB) announced the release of Opinion 1/2025 (Opinion), jointly adopted with the European Data Protection Supervisor (EDPS), on the European Commission’s proposal (Proposal) for a regulation aimed at introducing simplified administrative burdens for small and medium-sized enterprises in several EU regulations, including GDPR.

From a data protection standpoint, the key element of the Proposal is the limitation of the obligation to keep records of processing activities to organisations with more than 750 employees. The EDPB and EDPS welcome the Proposal and highlight the fact that the proposed changes are limited and targeted, and do not undermine the core principles and obligations of the GDPR.

However, the two bodies also stress the importance of upholding the fundamental right to data protection and requested further clarification on the appropriateness of the 750-employee threshold specifically in the context of the GDPR.

Newsletter n. 109 – July 2025