Regulatory Watch  /  European Union  /  Proposed regulation
Moderate impactProposed regulationPublished

EU Commission's Digital Omnibus proposal to limit GDPR Right of Access faces criticism from DPOs

The European Commission has published a Digital Omnibus proposal that would narrow the definition of personal data, restrict the Right of Access and allow broader AI training. A survey by noyb shows data protection officers consider the Right of Access low‑burden but valuable, and they favor clearer thresholds and whitelist/blacklist lists over flexible risk‑based rules. The feedback highlights a gap between the Commission's simplification aims and the practical needs of privacy professionals.

Why it matters: The proposal could weaken EU data‑subject rights while increasing legal uncertainty for businesses, making its impact significant for privacy compliance.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
GDPR Omnibus: EU “simplification” far removed from real business needs
noyb · primary source · Mar 5, 2026
GDPR Omnibus: EU “simplification” far removed from real business needs
noyb · Mar 5, 2026
Details
JurisdictionEuropean Union
RegulatorEuropean Commission
LegislatureEuropean Commission
LawGeneral Data Protection Regulation
StatusPublished
PublishedMarch 5, 2026
Effectivenot stated
OrganisationsEuropean Commission, noyb
Topicsaccess, transparency, consent, data minimization, purpose limitation, ai governance, privacy
Datapersonal