Dear Leanne,

Following up on the discussions last autumn, I prepared yet another draft of an article foreseen in task 5.2. It’s also saved on the shared folder with additional materials.

While I tried to keep it focused, I think some important issues remain untouched, such as that there’s a lot of guidance available by DPAs though it is not always clear how to find the relevant one; national guidance documents usually build on the EDPB opinions or the EC, so guidance on EU level for SMEs should be encouraged. Now we suggested that such guidance should be primarily developed at national level. Throughout the contribution we mostly assume that there are distinctive needs of SMEs but we never elaborate on them. Do you think we need to further elaborate on such needs? Perhaps, SME association expectations from DPAs should be also more nuanced?  

@Kulitsán Gábor & @Nagy Renáta perhaps you could provide some comments on this contribution?

Best regards,

Lina Jasmontaite

Doctoral researcher

Law, Science, Technology and Society (LSTS)

Vrije Universiteit Brussel (VUB)

Brussels Privacy Hub (BPH)

Room 4B306, Pleinlaan 2, 1050

Brussels, Belgium

https://lsts.research.vub.be | www.brusselsprivacyhub.org