Mr. John Devitt:

I do not think GDPR would apply to companies that are members of a business association or group and I see no reason why such business associations would not furnish the name of those member organisations to the commission. I foresee a problem arising if, for example, a not-for-profit organisation with a large membership, such as Amnesty International, was expected to furnish the names of its members, of which it could have thousands. However, I see no reason why a business association or trade association representing organisations would not name those organisations when making representations or make that information otherwise available.