The Digital Omnibus (Omnibus VII) legislative package proposal, prepared by the European Commission with an aim to simplify the EU acquis, was announced on 19 November 2025. With this proposal, the Commission seeks to clarify and streamline the rules on cybersecurity, data protection and data access, as well as artificial intelligence (AI).
The Digital Omnibus makes comprehensive amendments to the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) such as the definition of personal data, abuse of the right of access to data, the information obligations of data controllers, personal data breach notifications, special categories of data, and the use of personal data in AI systems.
The legislative package is expected to enter into force following the legislative process and its publication in the Official Journal of the EU, after being submitted to the European Parliament and the European Council for adoption.
In addition, the Commission came up with a proposal in order to ensure faster and more effective enforcement of the GDPR in large-scale and cross-border cases. In this context, Regulation (EU) 2025/2518 of 26 November 2025, laying down additional procedural rules on the enforcement of GDPR, was published in the Official Journal of the EU on 12 December 2025. The Regulation will enter into force 20 days after that date and will become applicable 15 months thereafter. It introduces new rules to support the effective functioning of the cooperation and consistency mechanism established under the GDPR.
For more information on the Digital Omnibus, please click here.
To access Regulation (EU) 2025/2518, please click here.













