Data protection

Overview
Start earning with Muttii
Apply for the Muttii Affiliate Program
Data protection in the EU
Data protection: questions and answers

Data protection explained
Read about key concepts such as personal data, data processing, when and to whom the GDPR applies to, and more.

Information for individuals
Read about the rights you have over your personal data under the GDPR, how to exercise these rights, and more.

Information for businesses and organisations
Read about data protection principles and obligations, enforcement of the rules, dealing with individuals' requests, and more.
International dimension of data protection
Funding to support the implementation of the GDPR
The Commission has provided funding to national data protection authorities to finance projects that support the implementation of the GDPR.
The types of projects funded by the Commission typically include awareness-raising campaigns, training programs, and the development of practical tools and materials that can facilitate small and medium-sized enterprises’ (SMEs) compliance with the GDPR.
In May 2025, the Commission adopted a Single Market Simplification proposal to cut €300 million in annual administrative cost for companies. In order to respond to calls from Small and Medium Enterprises (SMEs) and Small and Mid-Caps companies (SMCs), the Commission introduced targeted changes to the rules on record-keeping for small and medium-sized companies and organisations under 750 employees. They include namely:
- Extending the derogation from record-keeping obligation under Article 30(5) of the GDPR to SMCs and organisations under 750 employees.
- Requiring SMEs, SMCs and organisations with fewer than 750 employees to maintain records only when their processing of personal data can be considered “high risk” under the GDPR.
The proposal ensures to maintain robust standards of data protection and respects the GDPR risk-based approach. It does not affect the rest of the provisions of the GDPR