Article 97 – Commission reports

By [six months after entry into force of this amending Regulation], the Commission shall issue a dedicated report with recommendations on Chapter IV on controller and processor, with particular regard to the proportionality of the obligations for small and medium enterprises and non-commercial organisations undertaking low risk processing activities and whether such obligations should be amended taking into account the level of risk for data subjects.