Exemption from the obligations listed in the Article 30, paragraph 1 and 2
The obligations referred to in paragraphs 1 and 2 shall not apply to an enterprise or an organisation employing fewer than 250 persons unless the processing it carries out is likely to result in a risk to the rights and freedoms of data subjects, the processing is not occasional, or the processing includes special categories of data as referred to in Article 9(1) or personal data relating to criminal convictions and offences referred to in Article 10.
Chapter IV, Section 1, Article 30, Paragraph 5
Regulation's subject matter
Records of processing activities (Article 30, Section 1, Chapter IV)
Scope of application
Enterprise or an organisation employing fewer than 250 persons