GDPR FAQs - Episode 4: How does the GDPR affect Small Businesses?

The GDPR itself doesn't distinguish between different sizes of business, so the new rules will apply to businesses and other organisations (so charities and other not-for-profit organisations) equally, irrespective of their size, however, when one comes to actually applying the rules to different types and sizes of business, there may be differences in the way those rules are applied. For example, a small business is likely to have less personal data, fewer employees, fewer customers, more simplistic IT systems, so although the rules will still apply, actually how they are applied will be more simplistic and easier than for say a large international tech company, where inevitably the application of the rules will be different altogether.