Simplification of record-keeping obligation: EDPB and EDPS adopt letter to EU Commission

The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) respond to the European Commission's proposal

The EDPB and EDPS have issued a letter to the European Commission regarding their upcoming proposal to simplify the record-keeping obligation under the General Data Protection Regulation (GDPR).

• Response to the Commission's Proposal: The joint letter acknowledges the Commission's intention to make specific modifications to Art. 30(5) of the GDPR.
• Formal Consultation: The EDPB and EDPS note that a formal consultation will follow the publication of the proposed legislative change.
• Preliminary Support: At this stage, the EDPB and EDPS express preliminary support for the targeted simplification initiative, provided it does not compromise the overall compliance requirements under the GDPR.
• Impact Assessment: The EDPB and EDPS request that the Commission conduct a thorough evaluation of the potential impacts on organizations with fewer than 500 employees, ensuring that the changes maintain a balanced approach between data protection and organizational interests.

Letter Details

Publication Date: 8 May 2025

Topics Covered: Controller, Processor, Record of Processing

Language: English

Download: Available upon request