GDPR RULES ARE on track to ease for some smaller businesses in a bid to improve competitiveness in the European Union, Ireland’s Commissioner in the bloc has signalled.

The General Data Protection Regulation introduced hundreds of pages of new requirements for businesses dealing with personal data of EU citizens.

It was designed to ensure that personal data should generally only be stored where there is a lawful basis, such as through consent or under a legal obligation.

It imposed a series of obligations on businesses around data storage and protection, as well as privacy rights.

Fines for GDPR violations can be significant.

The regulation has sometimes been criticised by some businesses as being a barrier to growth and innovation, on top of carrying onerous record-keeping obligations.

One of the most noticeable changes brought about by GDPR are the familiar pop-up consent forms for advertising and functional cookies when visiting websites.

However, proponents of the regulation argue that it offers improved data and privacy rights for citizens.

Asked if the Commission was considering easing the rules to enhance competitiveness for business, Michael McGrath said GDPR will feature in a future omnibus package.

The EU said these “omnibus packages” will address overlapping, unnecessary or disproportionate rules that are creating unnecessary burden for EU businesses.

It added that the new proposals will cut red tape and simplify EU rules for citizens and business.

Speaking to reporters today in Dublin, McGrath added: “We have already brought forward the first round of omnibus proposals, and they have to make their way through the legislative process over the period ahead.

“We are examining the impact on SMEs and smaller organisations in relation to the record-keeping obligations, for example, so we’re looking at that specifically.

“And yes, there will be a proposal in relation to GDPR that will be part of the forthcoming omnibus package.”

This fourth omnibus package to simply GDPR rules for SMEs had been planned for 16 April, but was pushed out to 21 May.

Others within the EU have been critical of GDP recently, with Denmark’s Digital Minister Caroline Stage Olsen telling reporters last week that while “privacy is completely necessary, we don’t need to regulate in a stupid way”.

He added that the EU needs to “make it easy for businesses and for companies to comply”.

-With additional reporting from Diarmud Pepper