Texts to 22 Oct 2026

Amendment 1601· GDPR Article 2(2)(e) (new)

Addition

Tabled by
Andrea Wechsler and 8 others (EPP)Andrea Wechsler, Marie-Sophie Lanig, Stefan Köhler, Alexandra Mehnert, Lena Düpont, Angelika Niebler, Verena Mertens, Christian Doleschal, Sabine Verheyen
Committee and document
ITRE–LIBE·amendments 1565–1740 to the draft report (CJ72-AM-791874, PE791.874v01-00)·27 July 2026
Source
Official text, pp. 55–56·printed header: Article 3 – paragraph 1 c (new) / Regulation (EU) 2016/679 / Article 2 – paragraph 2 – point e (new)
Targets
Article 2(2)(e) (new) of the General Data Protection Regulation (GDPR)

Text of the amendment

As tabled

Amending instruction

In Article 2, the following point e is added:

Point (e) it would add

‘(e) by associations, foundations and other non-profit organisations established in the Union, where the processing is carried out solely in the course of their statutory non-commercial activities and is limited to the administration of members, former members, volunteers, donors or beneficiaries, provided that such processing does not involve systematic monitoring or processing likely to result in a high risk to the rights and freedoms of natural persons within the meaning of Article 35, and that the personal data are not disclosed to third parties for commercial purposes.’

Wider passage printed with the amendment

2.This Regulation does not apply to the processing of personal data:

(a)in the course of an activity which falls outside the scope of Union law;

(b)by the Member States when carrying out activities which fall within the scope of Chapter 2 of Title V of the TEU;

(c)by a natural person in the course of a purely personal or household activity;

GDPR Article 2 with this amendment

Amendment 1601 applied to the Commission proposal, no other amendment

Unchanged: (1)
1.

This Regulation applies to the processing of personal data wholly or partly by automated means and to the processing other than by automated means of personal data which form part of a filing system or are intended to form part of a filing system.

2.

This Regulation does not apply to the processing of personal data:

Amended
Unchanged: (a), (b), (c) and (d)
(a)

in the course of an activity which falls outside the scope of Union law;

(b)

by the Member States when carrying out activities which fall within the scope of Chapter 2 of Title V of the TEU;

(c)

by a natural person in the course of a purely personal or household activity;

(d)

by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security.

(e)

‘(e) by associations, foundations and other non-profit organisations established in the Union, where the processing is carried out solely in the course of their statutory non-commercial activities and is limited to the administration of members, former members, volunteers, donors or beneficiaries, provided that such processing does not involve systematic monitoring or processing likely to result in a high risk to the rights and freedoms of natural persons within the meaning of Article 35, and that the personal data are not disclosed to third parties for commercial purposes.’

New
Unchanged: (3) and (4)
3.

For the processing of personal data by the Union institutions, bodies, offices and agencies, Regulation (EC) No 45/2001 applies. Regulation (EC) No 45/2001 and other Union legal acts applicable to such processing of personal data shall be adapted to the principles and rules of this Regulation in accordance with Article 98.

4.

This Regulation shall be without prejudice to the application of Directive 2000/31/EC, in particular of the liability rules of intermediary service providers in Articles 12 to 15 of that Directive.

Full text on the GDPR Article 2 page

Justification

Associations, foundations and other non-profit organisations generally process personal data within clear, direct and non-commercial relationships with their members, volunteers, donors or beneficiaries. Subjecting such limited and low-risk processing to the full scope of Regulation (EU) 2016/679 places a disproportionate administrative burden on civil-society and volunteer-based organisations, many of which lack dedicated compliance structures. This targeted exclusion complements the specific simplifications proposed for Articles 13, 14 and 30, while preserving the application of the Regulation to systematic monitoring, automated decision-making, high-risk processing and the commercial disclosure of personal data.

Target

Wording of the targeted provisionlaw in force, Commission proposal, latest Council text

No Council text amends Article 2(2)(e) (new).

Cite this amendment

Amendment 1601 (Andrea Wechsler and others), European Parliament, Committee on Industry, Research and Energy and Committee on Civil Liberties, Justice and Home Affairs, amendments 1565–1740 to the draft report on COM(2025) 837 (CJ72-AM-791874, PE791.874v01-00, 27 July 2026), pp. 55–56

Link, short form and official text
Reference

Amendment 1601 (Andrea Wechsler and others), European Parliament, Committee on Industry, Research and Energy and Committee on Civil Liberties, Justice and Home Affairs, amendments 1565–1740 to the draft report on COM(2025) 837 (CJ72-AM-791874, PE791.874v01-00, 27 July 2026), pp. 55–56

Short form

ITRE–LIBE Amendment 1601 (CJ72-AM-791874), p. 55

Entry in the source list