My company is less than 250 people, am I exempt from data processing record-keeping under Article 30?

The short answer is, probably not. The majority of companies, regardless of the size of their employee pool, collects and stores an immense amount of personal data on a regular basis. Unless the collection of personal data is merely occasional (a standard that is not defined under GDPR), which it likely is not, then your organization of 250 or less is expected to record data processing activities as if you were an enterprise of any other size. If you have more detailed questions about this topic, we suggest you send your query to an attorney. The full text of Article 30 is available here

Learn more about the Regulation by reading our GDPR e-book. 

Download the GDPR Guide



This article is provided for general informational purposes only and is not intended to be legal advice.  By using the article, you agree that the information on this article does not constitute legal or other professional advice. The article is not a substitute for obtaining legal advice from a qualified attorney licensed in your state. The information on the article may be changed without notice and is not guaranteed to be complete, correct or up-to-date, and may not reflect the most current legal developments.