“The European Commission is now finalizing a plan to simplify and potentially remove many of the regulatory requirements imposed by the continent’s complex and far-reaching General Data Protection Regulation, particularly those impacting small and medium-sized businesses.”

The EU plans to cut GDPR requirements for smaller companies. The draft widens a record-keeping exemption to firms with fewer than 750 employees. Most European companies fall under that line. Less paperwork for them means less protection for the people whose data they hold.