The EU Commission is proposing that SMEs, SMCs, and organizations with fewer than 750 employees will be required to maintain records only when the processing of personal data is “high risk” under the GDPR. The proposals on simplification measures for EU businesses, issued yesterday, do not include the procedural rules for GDPR cross-border cases, which are still being negotiated. The European Commission is identifying a new category of companies, small mid-caps (SMCs), i.e., companies with fewer than 750 employees, and either up to €150 million in turnover or up to €129 million in total assets.
