Key components of the Digital Omnibus

• Streamlined AI rules: The package introduces innovation-friendly amendments to the AI Act, such as the simplified rules currently available for Small and Medium-sized Enterprise (SMEs) being extended to small mid-cap companies, saving an estimated €225 million annually.
• Simplified cybersecurity reporting: A new single-entry point for incident reporting will significantly reduce duplication and complexity. By consolidating obligations under laws such as Network and Information Systems Directive (NIS2 Directive) and the GDPR, the reporting burden for businesses is expected to be cut by half.
• Simplified obligations for businesses: Several GDPR obligations will be streamlined, including clearer rules on when Data Protection Impact Assessments (DPIAs) are required through EU-wide lists of processing activities, essentially providing an EU-wide standard on particular types of processing operations which will need to undergo a DPIA, creating greater uniformity across the EU in this area.
• Improved cookie rules: Users will benefit from fewer cookie pop-ups, one-click consent and unified privacy settings, improving the overall online experience.
• Clarity on use of personal data in AI: The Omnibus clarifies the definition of personal data by providing legal clarity on when and how personal data can be used responsibly, e.g. providing that state of the art privacy preserving techniques for AI training are required.
• Improved access to data: The package consolidates EU data laws into the Data Act and GDPR, simplifying compliance and unlocking high-quality datasets for AI innovation. Targeted exemptions for cloud-switching rules are expected to save €1.5 billion in one-off costs.

Data Union Strategy

In addition, the package contains a Data Union Strategy which aims to unlock high-quality data for AI, for example through data labs and clearer data-sharing rules, while also offering practical legal support and strengthening Europe’s control and protection of its data.

European business wallets:

The digital package also includes a European Business Wallet, a single digital tool for companies and public bodies to manage tasks that still often require in-person paperwork. It will allow businesses to securely sign, store, and share verified documents and communicate digitally with authorities across all EU Member States.

Next steps

The legislative proposals will now be reviewed by the European Parliament and the Council. In addition, the EU Commission has launched a Digital Fitness Check, a public consultation open until March 2026, to assess the cumulative impact of EU digital rules and guide future simplification efforts.

The press release can be accessed here.

The Digital Rulebook for the EU can be accessed here.

The Factsheet – Digital Package Factsheet can be accessed here.

The Digital Package Q&A can be accessed here.