Voss and Schrems propose GDPR revision
German MEP Axel Voss and privacy activist Max Schrems have proposed a targeted revision of the General Data Protection Regulation (GDPR) that aims to differentiate between large and small companies. This proposal comes amid ongoing debates about the effectiveness and enforcement of the GDPR since its introduction. While many believe that the regulation needs improvement, there are concerns that revising it could undermine its achievements and open the door to potential lobbying that may weaken privacy protections.
The proposed revision consists of a three-layered structure. The first layer, termed the ‘Mini-GDPR,’ would apply to 90% of businesses, reducing documentation requirements and eliminating the need for data protection officers. The second layer, ‘Normal GDPR,’ would maintain most of the current rules for companies that handle sensitive personal data or operate on a larger scale. The third layer, ‘GDPR plus,’ is designed for very large online platforms (VLOPs) and companies whose business models rely heavily on personal data processing, requiring them to undergo mandatory external audits.
Despite the potential benefits of this new framework, Voss and Schrems have significant disagreements on key issues. Voss proposes removing the enforcement role of the European Data Protection Board and altering fundamental principles such as the right to be forgotten. In contrast, Schrems argues that the lack of enforcement is a critical issue that needs to be addressed. Both parties recognize the importance of finding common ground to ensure a swift implementation of the proposed revisions.
Concerns were raised during discussions about the risks of reopening the GDPR. Critics fear that such changes could invite lobbyists to dilute existing obligations, jeopardizing the regulation’s integrity. Additionally, any adjustments to the GDPR could impact international privacy standards and the stability that the regulation has provided in recent years. With the EU facing external pressures from entities like the Trump administration and companies such as Meta, the timing of any revisions is crucial.
Source: Voss and Schrems team up to propose three-layered GDPR revision
