First announced: The European Commission presented its Digital Omnibus proposal in November 2025.
Submitted by: NYBACS Compliance Desk
What changed
The proposal would simplify parts of the EU’s digital regulatory framework, including selected data, cookie, cybersecurity incident-reporting, and AI rules.
Who’s affected
Businesses operating in the EU that process personal or business data, use tracking technologies, manage cybersecurity incidents, or provide or deploy AI systems.
Immediate actions
- Identify which EU digital rules currently apply to the business.
- Keep existing privacy and cybersecurity procedures in place.
- Track the proposal through the EU legislative process.
- Review the final adopted text before changing compliance processes.
Practical note & timeline
The Digital Omnibus is a legislative proposal. Proposed changes are not effective until adopted and applicable under the final legislation.
Source: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX%3A52025PC0837
