Proposal for Simplification of EU Digital Regulation
Sweeping proposal to simplify EU digital regulation by amending GDPR, AI Act, ePrivacy Directive, Data Act, NIS2, and the Cybersecurity Act simultaneously. Proposes redefining ‘personal data,’ standardised breach notification via a single entry point, legitimate interest basis for AI model training, and SME exemptions from records of processing. EUR 6B projected savings by 2029.
6
Regulations Amended
€6B
Projected Savings
2029
Full Impact Year
27
MS Unified
November 2025
European Commission publishes proposal
Q1 2026
European Parliament committee review begins
Spring 2026
Expected trilogue negotiations
Q3 2026
Anticipated adoption and publication
Proposes a relative, entity-driven definition of personal data. Data that one entity cannot use to identify a person would not be considered personal data for that entity.
Single entry point for data breach notifications across Member States, replacing 27 different national notification procedures.
Explicit legitimate interest legal basis for using personal data in AI model training, subject to appropriate safeguards and data protection impact assessments.
Small and medium enterprises exempted from maintaining records of processing activities, reducing administrative burden for smaller organisations.
Cookie consent rules moved from the ePrivacy Directive into GDPR, simplifying the dual-regulation overlap that has caused compliance confusion.
Consistent enforcement mechanisms across all amended regulations, with streamlined supervisory cooperation. Projected EUR 6B cost savings for businesses by 2029.
Varies by regulation
Penalty framework inherits from each amended regulation (GDPR: 4% turnover, AI Act: 7% turnover, NIS2: EUR 10M or 2% turnover). Specific adjustments may be introduced during trilogue negotiations.
We provide structured preparation and compliance support for Digital Omnibus.
Schedule a consultation with our regulatory experts to assess your Digital Omnibus compliance posture and build a practical roadmap.