On July 9, 2025, the European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) issued Joint Opinion 01/2025 on the European Commission’s proposal to amend the General Data Protection Regulation (GDPR).The proposal aims to simplify record-keeping obligations for small and medium-sized enterprises (SMEs) and small mid-cap companies (SMCs) by raising the employee threshold for exemptions from 250 to 750 and extending the scope of codes of conduct and certification mechanisms to SMCs.While the EDPB and EDPS support these changes, they emphasize the need for further clarification on the new thresholds and alignment with definitions of SMEs and SMCs.
