On 8 July 2025 the EDPB and the European Data Protection Supervisor (EDPS) issued a joint statement on the proposal for a regulation on simplification measures for SMEs and SMCs, in particular the record keeping obligation under Article 30 GDPR.
The EDPB and EDPS confirmed that they support the general objective of the proposal as long as pursuing the objective does not result in lowering the protection of fundamental rights of individuals.
They have noted that the proposal does not include an assessment on the impact the proposal would have on fundamental rights and have queried why the new threshold of organisations employing fewer than 750 persons is appropriate. They have also requested several clarifications to recitals.
The EDPB also plans to issue some simplified guidance to help organisations to better understand their obligations under GDPR.
The opinion can be found here.