EU Digital Omnibus: proposed easing of AI & privacy rules explained

The European Commission has introduced a broad “Digital Omnibus” package that would revise several tech rules across AI, data, cookies and cybersecurity. The draft aims to simplify compliance for companies, centralize AI oversight, and reduce user friction from frequent cookie banners — while proponents say it will spur business growth across Europe.

Key proposed changes include allowing certain AI firms access to shared personal data for model training, creating an AI Office to coordinate oversight of powerful general‑purpose models, and easing some timelines and paperwork burdens for smaller businesses. The Commission also suggests rethinking cookie consent flows so users see fewer pop‑ups and can save preferences.

What’s changing — at a glance

• AI governance: Centralize oversight in a new AI Office to reduce fragmentation and align rules for general‑purpose models.
• Data access: Amendments could allow AI companies to access shared personal data for training under specific safeguards.
• Cookie consent: Fewer banners, one‑click consent and browser‑saved preferences are proposed to reduce “cookie fatigue.”
• SME support: Simplified paperwork and delayed high‑risk AI obligations until standards/tools are available to affected companies.

Why it matters

Supporters argue the changes will accelerate AI development and help European businesses compete globally by cutting red tape and improving access to data and infrastructure. Centralized oversight could also streamline approvals and enforcement across member states.

Critics worry that relaxing rules — especially around access to personal data and relaxing timelines for high‑risk AI safeguards — could weaken privacy protections and reduce accountability for powerful systems. The proposals will face scrutiny in the European Parliament and from privacy advocates before anything becomes law.

Next steps and what to watch

• The Commission’s draft now goes to the European Parliament and member states for debate and potential amendment.
• Expect negotiations over data access safeguards, the scope of the AI Office, and exact technical rules for cookies and consent persistence.
• Watch responses from privacy groups, industry players (Google, Meta, Apple) and consumer bodies — their input could shape the final compromise.

For official context, follow the European Commission’s digital policy pages (opens in a new tab): digital-strategy.ec.europa.eu.

Discussion: Do you think these changes strike the right balance between fostering AI innovation and protecting citizens’ privacy — or do they risk watering down hard‑won safeguards?