Skip To The Main Content

Data Protection

The Issue

Data Protection rules for member countries of the European Union have been updated and new requirements will need to be implemented from May 2018.

 Action FSB have taken

We lobbied MEPs and member states to ensure they understood the potential implications of changes in data protection laws on small firms across the EU and to ensure small businesses do not suffer from changes to EU data protection laws.

Our Goal

Small businesses across the EU look for one set of data protection rules to make sure they can start or continue investing in European jobs and innovation. We welcomed efforts to modernise data protection rules, while ensuring small firms are not over-burdened by the changes. This will allow them to continue to grow and expand.

Achievements in...



  • We lobbied to ensure most small firms which only process data as a secondary activity, or do not process any data at all, would be exempt from the requirement to conduct costly Data Protection Impact Assessments (DPIAs) and have a Data Protection Officer (DPO)  We’re looking at authorities to provide small businesses with clear and simple checklists for compliance to help small business meet these new requirements when they come into force in May 2018. 
  • We think fines should only be given to small firms that make no effort to comply, when they are found to be in breach of the new EU data protection rules

Visit UK/Westminster section

FSB Legal Hub

Factsheets and downloads for: Employment Law, Taxation Matters, Business Law and Health & Safety information. All free. As well as monthly bulletins.

Find out more

Related Links