A new plan enacted by the German government would see fewer small and medium-sized enterprises (SME) in Germany being required to appoint a data protection officer (DPO). German SME with fewer than 50 employees involved in automated processing of personal data will no longer would have to appoint the DPO. Before the new policy, the threshold was 20 employees.