EU Digital Omnibus package seeks major changes to Data Act and GDPR, affecting cloud services and online advertising

The European Commission has introduced a Digital Omnibus legislative package that proposes substantial amendments to the EU Data Act. Key proposals include clearer rules on early‑termination penalties for cloud‑switching contracts, transitional exemptions for SME and small‑mid‑cap cloud providers on contracts signed before 12 September 2025, and stronger rights for manufacturers to refuse data‑access requests that could expose trade secrets. The package also narrows the public‑sector access regime to data from connected devices, limiting it to genuine public emergencies, and integrates provisions from the Data Governance Act into the Data Act.

In parallel, the European Parliament is reviewing amendments to the GDPR and e‑Privacy Directive. The proposals aim to simplify cookie consent by requiring browsers to present a single consent window and to ban certain automated decision‑making. Critics warn that the changes could increase consent fatigue, reshape the European digital advertising market and cut billions of euros in revenue for media outlets in high‑consumption countries such as Estonia, where online news and e‑commerce are strong.

Both sets of reforms are intended to streamline EU digital rules but raise concerns about competitiveness, data‑sharing obligations and the financial impact on small‑scale digital businesses.