Exemption from the obligations in terms of the Article 30, paragraph 1 and 2 of the regulation
The obligations referred to in paragraphs 1 and 2 shall not apply to an enterprise or an organisation employing fewer than 250 persons unless the processing it carries out is likely to result in a risk to the rights and freedoms of data subjects, the processing is not occasional, or the processing includes special categories of data as referred to in Article 9(1) or personal data relating to criminal convictions and offences referred to in Article 10.
Chapter IV, Section 1, Article 30, Paragraph 5
Records of processing activities (Article 30, Section 1, Chapter IV)
Subjects of regulation
Enterprise or an organisation employing fewer than 250 persons