EU proposes GDPR simplification for SMEs, privacy groups critical

The European Commission is preparing a proposal to simplify the GDPR, aiming to reduce administrative burdens for small and medium-sized enterprises (SMEs). The changes would focus on reporting and documentation obligations, potentially easing requirements for companies with fewer than 500 employees. Justice Commissioner Michael McGrath emphasizes support for SMEs without altering core data protection principles. However, privacy advocates and some MEPs warn that changes to enforcement procedures could increase complexity and weaken protections. The proposal, initially scheduled for April, has been postponed to May 21. Organizations like noyb, led by Max Schrems, fear the new procedural rules will create more disputes rather than simplify processes. The EU seeks to balance bureaucracy reduction with maintaining GDPR's status as a global standard.