EU Digital Omnibus legislative reform

The European Union is processing the Digital Omnibus, a legislative package intended to amend the General Data Protection Regulation (GDPR), the Data Act, and the AI Act. The European Commission has stated the reform aims to simplify regulations and reduce administrative costs for businesses by up to 5 billion euros by 2029.

During the legislative process, advocacy groups like noyb raised concerns regarding Big Tech lobbying and potential loopholes that could limit GDPR protections or allow AI training without explicit consent.

EU member states have since reached a common position on the package. This agreement includes provisions to facilitate the use of personal data for training artificial intelligence models. However, the compromise has faced criticism from various sectors: industry groups such as eco have expressed concerns regarding a lack of legal certainty for AI competitiveness, while labor unions and consumer protection organizations have characterized the agreement as a “significant setback for digital fundamental rights.”

Under the Irish presidency, the Council of the European Union has moved to simplify the digital rulebook to make it more accessible for businesses and citizens. While the European Commission previously suggested reducing cookie banner frequency through central browser preferences, the EU Council rejected this, opting instead to maintain existing ePrivacy Directive rules. The new position expands the list of specific purposes for which user consent is not required, including service provision, reach measurement, and device security. The Council is now prepared to enter negotiations with the European Parliament to finalize the framework.