European Commission to Propose GDPR Simplification
The European Union is planning to amend the General Data Protection Regulation (GDPR) as part of its ongoing efforts to reduce regulatory burdens on businesses. The European Commission, led by President Ursula von der Leyen, aims to make European companies more competitive against their counterparts in the United States and China. The proposed changes are expected to be unveiled in the coming weeks, focusing on simplifying compliance for small and medium-sized enterprises (SMEs) and easing the complex requirements that many businesses face under the current law.
Since its introduction in 2018, the GDPR has been viewed as one of the most intricate pieces of legislation impacting businesses across various sectors. The regulation mandates strict guidelines for data management and the handling of personal data requests from individuals. Critics, including Danish Digital Minister Caroline Stage Olsen and former Italian Prime Minister Mario Draghi, argue that the complexity of the GDPR hinders innovation and competitiveness in Europe. They advocate for a more streamlined approach that maintains essential privacy protections while reducing unnecessary regulatory burdens.
Justice Commissioner Michael McGrath has highlighted the need for greater support for SMEs in navigating GDPR compliance. A simplification proposal is anticipated, with a focus on reporting requirements for organizations with fewer than 500 employees. While the core objectives of the GDPR will remain intact, adjustments may include reducing the documentation required for data processing activities and simplifying data protection impact assessments, which are often seen as overly burdensome for smaller firms.
The potential revisions to the GDPR could ignite a lobbying battle between large tech companies and privacy advocates, both of which hold significant influence in Brussels. Privacy activist Max Schrems has cautioned that while the GDPR is a target for lobbyists, its fundamental principles are protected by the EU’s Charter of Fundamental Rights. Any attempt to dilute these core elements would likely face legal challenges, underscoring the importance of balancing business interests with the protection of personal data.
Source: Europe’s GDPR privacy law is headed for red tape bonfire within ‘weeks’