Amendment 231· Digital Omnibus proposal Recital 27c (new)
+Addition
Text of the amendment
As tabled
Wording it would add
(27c)Given the limited resource of supervisory authorities, large controllers shall be certified for compliance with Regulation (EU) 2016/679 each year. To ensure a high level of protection and to ensure that certification bodies that knowingly and repeatedly certified conduct that was clearly or foreseeably unlawful, new options for the revocation of accreditation are introduced.
Justification
RISK-BASED APPROACH #3: This package makes the GDPR’s risk-based approach practical by introducing objective categories for small, medium and large controllers. Small controllers with limited, non-core processing receive relief from selected administrative duties, while data-subject rights and enforcement remain intact. Very large controllers, gatekeepers and VLOPs/VLOSEs face stronger transparency, annual certification and closer supervision. Compliance effort is thus reduced where risks are low and increased where scale and systemic impact are greatest.
Target
Wording of the targeted provisionlaw in force, Commission proposal, latest Council text
No Council text amends Recital 27c (new).
Cite this amendment
Amendment 231 (Axel Voss), European Parliament, Committee on Industry, Research and Energy and Committee on Civil Liberties, Justice and Home Affairs, amendments 79–250 to the draft report on COM(2025) 837 (CJ72-AM-786820, PE786.820v01-00, 27 July 2026), pp. 155–156
Link, short form and official text
Amendment 231 (Axel Voss), European Parliament, Committee on Industry, Research and Energy and Committee on Civil Liberties, Justice and Home Affairs, amendments 79–250 to the draft report on COM(2025) 837 (CJ72-AM-786820, PE786.820v01-00, 27 July 2026), pp. 155–156
ITRE–LIBE Amendment 231 (CJ72-AM-786820), p. 155