Brussels, 08 May – The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) have adopted a letter addressed to the European Commission. This letter concerns the upcoming proposal on the simplification of record-keeping obligations under the GDPR, specifically a targeted amendment of Article 30(5) GDPR.
This joint letter serves as a reply to a letter sent by the European Commission to the EDPB and EDPS on May 6, 2025. In its letter, the Commission explained its intention to introduce specific modifications to the GDPR. The EDPB and EDPS understand that a formal consultation will occur after the publication of the proposed legislative change.
At this stage, the EDPB and EDPS have expressed preliminary support for this targeted simplification initiative. They emphasize that this simplification should not affect the obligation of controllers and processors to comply with other GDPR requirements. However, they have requested the Commission to better evaluate the impact on organizations subject to this change. Their aim is to assess whether the draft proposal ensures a proportionate and fair balance between the protection of personal data and the interests of organizations with fewer than 500 employees.