Five years after the entry into force of the General Data Protection Regulation, BVD e. V. A clear conclusion: The GDPR has strengthened data protection – but it needs an update. In a current position paper, the association calls for a practical development that creates more legal certainty, reduces bureaucratic hurdles and at the same time improves the protection of affected people.

Bureaucracy reduction through clear rules and simple language

At the center of criticism are imprecise phrases, lack of standards and disproportionate effort, especially for smaller companies. The BVD suggests that the GDPR to be more risky and linguistically clearer in terms of content. In addition, binding interpretation guidelines of the data protection supervisory authorities should help to avoid legal uncertainty and to facilitate daily work. Thomas Spaing, CEO of the BVD, emphasizes: “The digital change needs clear rules – but they have to be understandable and a healthy level.

Strengthen data protection officer – especially in medium -sized companies

Another central demand for the position paper is the legal strengthening of the data protection officer. With clearly defined tasks and a certified qualification, you could particularly relieve small organizations and at the same time act as a bridge builder between regulation and practice. The association sees this a key role for successful and legally secure use of digital challenges. “Data protection officers help shape digitization – provided they are being structurally and legally strengthened,” continued Spaing.

The BVD also demands that manufacturers have to assume digital products and services more responsibility. The goal is a data protection -compliant design already ex works (“Privacy by Design”). This is the only way to establish a trustworthy and secure digital infrastructure in Europe in the long term.

GDPR: start to the reform debate

With the position paper, the association starts a campaign to strengthen and simplify data protection compliance in Europe. Together with the European umbrella organization of data protection officers (EFDPO) and partners from business and civil society, the BVD invites you to a specialist conference in Berlin on September 24, 2025. The first reform ideas were already presented in spring with the MEP Axel Voss as part of a public Fireside chat.

The GDPR needs an update – not a step backwards

The BVD makes it clear that it is not about the abolition of high data protection standards, but about their concrete, understandable and future -proof implementation. Small and medium -sized companies in particular need solutions, no further loads. The message to Brussels is clear: data protection remains the fundamental right – but it has to be clear, practical and fairly designed so that it works. Now is the right time to set the course for a GDPR 2.0.