Denmark Leads Charge to Simplify GDPR—But Will Europe’s Fast-Growth Companies Benefit?

European Ministers of Justice recently met in Copenhagen to talk about how to make GDPR rules easier to follow. GDPR, or the General Data Protection Regulation, is the law that protects people’s personal data in the European Union. It was first put in place in 2016 and is one of the strictest privacy laws in the world.

European Ministers Meet to Discuss GDPR Reforms

While many people agree that protecting data is important, companies across Europe—especially smaller ones—are struggling. They say the rules are too complicated and hard to manage. During the meeting, ministers said that making the GDPR simpler would help businesses, especially small and mid-sized ones.

The main focus of the meeting was not to change the entire GDPR law. Instead, the idea is to adjust parts of it so it’s easier for companies to follow. For example, some ministers said the law should be more “user-friendly” and should not create too much extra paperwork for businesses.

The Danish hosts of the meeting said that too many rules hurt Europe’s ability to compete with other parts of the world. They believe that lighter rules could help businesses grow faster. Some ministers also said they want to make the rules easier without losing the strong privacy protections that the law provides.

Commission Pushes for Targeted Changes Only

The European Commission has made it clear that it does not want to open up the entire GDPR for a full review. Instead, it is working on small, targeted changes. Earlier this year, it proposed that small companies with fewer than 750 employees should not have to keep detailed records under GDPR. This would ease the load for many businesses.

The Commission also held a special meeting with businesses and other groups to listen to their concerns. Most agreed that there should not be major changes to the law. However, they did ask for clearer rules and better guidance from national data protection offices. They also said that GDPR rules are not always applied in the same way in different countries, which causes confusion.

In addition to this, the Commission is working on a broader plan called the European Data Union Strategy. This plan tries to connect different data laws like the Open Data Directive, the Data Governance Act, and the Data Act. The aim is to make data sharing across the EU easier and more effective. But some say that GDPR rules are stopping this from happening because people and companies are afraid to share data.

Many people blame the way GDPR is interpreted rather than the law itself. Still, that strict interpretation causes problems for both public and private groups. Some won’t share useful data even when it is allowed, just to be safe.

Denmark’s Proposals May Leave Scaleups Behind

As part of its push for changes, Denmark has shared a list of ideas to make GDPR more business-friendly. These include setting a minimum size before people can claim their data rights, giving small companies more freedom for low-risk data work, and making data complaints go through the company first before reaching data protection offices.

One big suggestion is to make rules about risk reports—called Data Protection Impact Assessments—simpler or even optional for smaller businesses. This could save time and money.

However, there is concern that these changes might only help very small companies—those with fewer than 250 workers or €50 million in revenue. But what about the fast-growing companies, known as scaleups? These businesses are bigger than small companies but not yet large corporations. They are vital to Europe’s economy, and they often lead in innovation and digital services.

🪙Kyrgyzstan Exposed? Russia’s Crypto Trail Raises Alarms Over Military Purchases & Sanctions Evasion

These scaleups face many challenges. They must follow strict GDPR rules, deal with public offices that are slow to share data, and work with private groups that are afraid of breaking the law. If changes to GDPR do not include them, they could miss out on support.

In an earlier reform, the Commission allowed easier rules for companies with fewer than 750 workers. Experts say that this same wider scope should be used again so scaleups are not forgotten. If not, these high-growth companies may continue to face big hurdles.

Europe has always focused on helping small businesses, which is important. But this time, it’s just as important not to leave out the ones that are growing fast. These companies play a key role in Europe’s future and need support too.

Mohit Kumbhar
Mohit Kumbharhttps://www.linkedin.com/in/mohitkumar99/
Mohit Kumbhar is the editor of Newsinterpretation. He edits the site’s news coverage and writes on artificial intelligence, AI search and how publishers become visible to AI assistants such as ChatGPT, Claude, Gemini and Perplexity. He also writes about NI Geovanta, the AI visibility tool for WordPress developed by Newsinterpretation.

TOP 10 TRENDING ON NEWSINTERPRETATION

Cyber Attacks on Space Infrastructure: Satellites, GPS and the Ground Systems Behind Them

From the Viasat KA-SAT hack to GPS jamming over the Baltic, a research guide to how attackers target satellites, navigation signals and ground stations, and why it matters on Earth.

How AI Agents Are Used in Cyber Attacks: From Assisted Hacking to AI-Orchestrated Espionage

Attackers now use AI agents to scan networks, write exploits and run extortion campaigns. A research guide to documented cases, including the first reported AI-orchestrated espionage campaign, and what defenders should do.

Cyber Attacks on AI and LLMs: How Attackers Target Large Language Models

Prompt injection, data poisoning, model theft and jailbreaks: a research guide to how attackers target AI systems and large language models, with real cases and defences.

French Supermarket Refrigeration Cyberattack: How Hacking the Cold Chain Can Endanger Lives

In October 2026 attackers heated refrigeration cabinets in hundreds of French supermarkets to as much as 50°C. No one was hurt, but the attack shows how hacking the cold chain can endanger lives through fire, food poisoning and spoiled medicines.

Cyberattacks on Nuclear Facilities: Stuxnet, Kudankulam and the Limits of Air Gaps

Stuxnet, the Davis-Besse worm and malware at India’s Kudankulam plant: what they show about cyber risk at nuclear facilities and the limits of air gaps.

Triton: When Hackers Target the Safety Systems That Prevent Industrial Disasters

The 2017 Triton attack targeted the safety systems that prevent industrial disasters. What happened, who was charged, and how plants protect their last line of defence.

Cybersecurity Risks in Smart Cities: When Connected Infrastructure Fails

How connecting traffic control, emergency alerts and utilities concentrates cyber risk in cities, what the Dallas and Atlanta incidents showed, and what governments recommend.

Weaponized Drones: Hijacking, GPS Spoofing and Emerging Cyber Warfare Risks

How drones can be hijacked, jammed or misled by GPS spoofing, what researchers have demonstrated, and why governments treat drone fleets as a security risk.

Ransomware Attacks on Hospitals: How Healthcare Cyberattacks Put Patients at Risk

How ransomware against hospitals and their suppliers delays care and endangers patients, what the Düsseldorf and WannaCry cases show, and what research says about deaths.

Operational blunder exposes massive Russian cyber espionage attack on Ukrainian prosecutors

A major cyberattack has compromised the email accounts of...

Cyber Attacks on Space Infrastructure: Satellites, GPS and the Ground Systems Behind Them

From the Viasat KA-SAT hack to GPS jamming over the Baltic, a research guide to how attackers target satellites, navigation signals and ground stations, and why it matters on Earth.

French Supermarket Refrigeration Cyberattack: How Hacking the Cold Chain Can Endanger Lives

In October 2026 attackers heated refrigeration cabinets in hundreds of French supermarkets to as much as 50°C. No one was hurt, but the attack shows how hacking the cold chain can endanger lives through fire, food poisoning and spoiled medicines.

Cyberattacks on Nuclear Facilities: Stuxnet, Kudankulam and the Limits of Air Gaps

Stuxnet, the Davis-Besse worm and malware at India’s Kudankulam plant: what they show about cyber risk at nuclear facilities and the limits of air gaps.

Triton: When Hackers Target the Safety Systems That Prevent Industrial Disasters

The 2017 Triton attack targeted the safety systems that prevent industrial disasters. What happened, who was charged, and how plants protect their last line of defence.

Cybersecurity Risks in Smart Cities: When Connected Infrastructure Fails

How connecting traffic control, emergency alerts and utilities concentrates cyber risk in cities, what the Dallas and Atlanta incidents showed, and what governments recommend.

Ransomware Attacks on Hospitals: How Healthcare Cyberattacks Put Patients at Risk

How ransomware against hospitals and their suppliers delays care and endangers patients, what the Düsseldorf and WannaCry cases show, and what research says about deaths.

FBI warns of AVrecon malware targeting outdated routers linked to proxy based cybercrime

A serious cybersecurity warning has been issued regarding commonly...

Related Articles

Popular Categories