The Digital Omnibus Package: Understanding The EU's Proposals

What you Need to Know

The EU's proposed Digital Omnibus Package will align and tighten cross-regulation obligations in 2025, with immediate impact on data governance, AI deployment and incident readiness across financial services and other regulated sectors.

It streamlines overlapping requirements under the GDPR, the ePrivacy Directive, the Data Act, the AI Act, NIS2 and DORA, while clarifying enforcement and redress, including in light of recent CJEU developments.

Introduction

On 19 November 2025, the European Commission published its proposed (i) Digital Omnibus and (ii) Digital Omnibus on AI ("Digital Omnibus Package") which form part of the European Union's ("EU") wider simplification agenda. The Digital Omnibus Package proposes targeted amendments to EU digital legislation including the GDPR, the ePrivacy Directive, the Data Act, the AI Act, NIS2 and DORA.