Comment by mnau

Please elaborate on less strict rules for Gdpr? There is Record of Processing Activities exemption for <250, but if you have to comply with Gdpr (and you do), you need essentially same info as Ropa and of course it has to be up to date. How else can you ensure you are in compliance?