GDPR record-keeping may get easier for firms with fewer than 750 staff
by Sypher | Published in News - July 14, 2025
Welcome to #SypherPrivacyTalks — Your news and article roundup. Bringing you the top privacy & compliance stories of the week.
Proposal to relax GDPR record-keeping for companies under 750 employees
🏛️ The EDPB-EDPS Joint Opinion 01/2025 provides guidance on the European Commission’s proposal of 21 May 2025 to simplify GDPR compliance for SMEs and small-to-medium-sized companies (SMCs - companies with up to 750 employees), including an amendment to Article 30(5) of the GDPR concerning record-keeping… read more
General-Purpose AI Code of Practice now available
digital-strategy.ec.europa.eu • 10+ min read
📜 On 10 July, the European Commission received the final version of the General-Purpose AI Code of Practice. This voluntary tool was developed by independent experts and over 1,000 stakeholders were consulted during its development, including model providers, small and medium-sized enterprises, academics, AI safety experts, and civil society organisations.
The Code has been designed to help the industry comply with the rules set out in the AI Act on general-purpose AI, which will come into effect on 2 August 2025… read more
Poland formally asks EU to investigate Elon Musk’s Grok AI chatbot
📝 The Polish deputy prime minister has formally requested that the EU launch an investigation into Grok, the AI chatbot integrated into Elon Musk's social media platform X, under the Digital Services Act (DSA) ... read more
Romania: Political party fined for GDPR breaches
dataprotection.ro • 3 min read
💶 The Data Protection Authority has fined the political party Alliance for the Union of Romanians (AUR) €25,000 for two major breaches of the GDPR.
The first was a security breach in the aur.mobi app that exposed users’ sensitive data due to inadequate protective measures (as notified by AUR). The second incident was related to excessive collection of personal data via the websites semnezsivotez.ro and semnezsivotez.org, without a clear legal basis and beyond the stated purpose (as reported by the Permanent Electoral Authority). The platforms have since been taken down.… read more (announcement in Romanian).
AI agents are revolutionising call centre services, but they must fully comply with GDPR
financialintelligence.ro • 8 min read
🤖 This article explores how AI is transforming call centre operations through automation and emotion analysis. It also highlights the legal and ethical challenges that companies face in ensuring full GDPR compliance. … read more (article in Romanian).
--
Get connected with us on LinkedIn or by subscribing to our weekly newsletter. We do our best to select the most interesting and relevant content in our field and deliver it to you in a bite-sized format, so you can stay up to date on topics such as Privacy Management & Compliance.
Photo by Austin Distel on Unsplash
