Last Update: 04/05/2026 at 2:50 PM EST
EU Tightens SME Data Rules
Coverage from PubAffairs Bruxelles, Irish Independent, and others
Articles
3
Latest Article
02/25
Active Days
9
Executive Summary
EU proposals would ease GDPR record keeping for smaller firms while Irish SME HR practices still expose data storage gaps and breach risk
- Two-thirds of Irish SMEs may breach data rules through poor HR record storage
- HR records are often kept in cloud folders, hard drives, paper files, and email threads
- The DPC has previously investigated SMEs over similar HR data handling issues
- A cited breach case involved mishandled sensitive employment data and regulatory intervention
- GDPR fines can reach 10m euros or 2 percent of global turnover
- EU proposals would extend lighter GDPR record keeping rules to some firms under 750 employees
- The draft also extends some SME exemptions to small mid-cap companies and keeps high risk data outside the carveout
Quick Facts
- What: Weak HR storage and proposed GDPR record keeping relief
- Where: Ireland and the European Union
- Why: To reduce breach risk and ease admin burdens
- Who: Irish SMEs and EU lawmakers
- When: In 2025 amid new proposals and reports

