While Article 30 of the European Union Data Protection Regulation (hereinafter ‘GDPR’)  is often talked about for its obligations of keeping records of processing, not much attention is paid to the exemption it provides to small organizations. The provision provides an exemption from record-keeping obligations under GDPR to organizations having an employee strength of less than 250. Continue reading