GDPR changes: Reducing bureaucracy for SMEs and SMCs
In May 2025, the European Commission proposed amendments to the General Data Protection Regulation (GDPR) aimed at reducing bureaucratic burdens, particularly for small and medium-sized enterprises (SMEs) as well as small mid-caps. The proposals include risk-based exemptions for documenting processing activities and greater flexibility in codes of conduct and certification schemes.
With this position paper, Bitkom contributes to the ongoing consultation. It assesses the proposed simplifications, evaluates their practical relevance, and formulates recommendations for a targeted and risk-based further development of the GDPR that provides real relief for businesses without undermining the stability of the existing legal framework.
