{"id":10727,"date":"2025-11-27T11:39:10","date_gmt":"2025-11-27T09:39:10","guid":{"rendered":"https:\/\/legalaccelerators.com\/?p=10727"},"modified":"2025-11-27T11:52:16","modified_gmt":"2025-11-27T09:52:16","slug":"the-eus-digital-omnibus","status":"publish","type":"post","link":"https:\/\/legalaccelerators.com\/ro\/the-eus-digital-omnibus\/","title":{"rendered":"The EU\u2019s Digital Omnibus"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

\u00a0<\/p>

The EU\u2019s Digital Omnibus: what it is and why it matters for AI<\/h2>

On 19 November 2025, the European Commission unveiled the \u201cDigital Omnibus\u201d \u2013 a
twin package of proposals to recalibrate Europe\u2019s flagship digital laws. One proposal
focuses on data and cyber legislation (including the GDPR, ePrivacy Directive, Data
Act, Data Governance Act and NIS2), the other on targeted amendments to the EU AI
Act. Together, they aim to simplify overlapping rules, cut compliance costs and respond
to concerns that the EU\u2019s regulatory framework is slowing down innovation and
competitiveness.
The political motivation is clear. After a decade of intense law-making, businesses
complain of overlapping obligations, multiple reporting channels and legal uncertainty,
while policymakers worry about Europe falling behind in data-driven innovation and AI.
Unsurprisingly, the package has split opinion: privacy advocates fear an erosion of
safeguards, while many AI developers and SaaS providers see long-awaited
pragmatism. At the same time, privacy and civil society groups are warning against
\u201cwatering down\u201d hard-won protections. The Digital Omnibus lands right in the middle of
that debate.
The most politically sensitive element is the AI Omnibus proposal, which re-opens the
EU AI Act only months after it entered into force. The message from Brussels is clear:
the architecture of the AI Act stays, but the knobs and dials need adjusting.<\/p>

\u00a0<\/p>

Key AI Act changes under the Digital Omnibus<\/h3>

1. More time to comply with high-risk rules<\/h4>

First, the timelines for high-risk AI are pushed back. Obligations for high-risk AI
systems, currently due from 2 August 2026, would only start to apply 6\u201312 months after
the relevant technical standards and \u201csupport tools\u201d are in place, and in any event no
later than 2 December 2027 and 2 August 2028 for product-safety based systems. That
gives providers and deployers more realistic room to design governance frameworks
and is intended to avoid companies having to design compliance programmes before
the rulebook\u2019s technical details are even finished.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t

\n\t\t\t\t2. Lighter AI literacy and documentation duties\n<\/b>
\nSecond, the much-discussed AI literacy duty is softened. Rather than placing a hard\nlegal obligation on every provider and deployer to run formal AI literacy programmes,\nthe responsibility to promote awareness shifts primarily to the EU institutions and\nMember States. Organisations are encouraged to build internal capability, and high-risk\nsystems must still be overseen by appropriately trained staff, but the blanket\nrequirement is scaled back. SMEs would also benefit from simplified technical\n\ndocumentation and more proportionate penalties, narrowing the gap between\nhyperscalers and growth-stage players.\t\t\t<\/p>\n\t\t\t\t\t<\/blockquote>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

3. Targeted flexibility on data and bias mitigation<\/h4>\n

The AI Act is tied more closely to the data reforms. The Digital Omnibus clarifies that
personal data can be used to train AI models on the basis of legitimate interests
(subject to safeguards and a right to object where required) and introduces a narrow
exemption for residual special category data in training datasets, provided it is strictly
controlled and not allowed to surface in outputs.<\/p>\n

The proposals also introduce extra flexibility for special category data. Limited use of
sensitive data would be allowed for developing and operating AI systems where
removing it would be disproportionate, provided robust technical and organisational
controls are in place. This acknowledges a practical reality: you cannot meaningfully
test for discrimination without, in some form, touching sensitive attributes. Separately,
biometric data used purely for on-device identity verification under the user\u2019s control
would get its own legal basis.<\/p>\n

<\/p>\n

4. Streamlined oversight and registration<\/h4>\n

The EU AI Office would gain a stronger role in supervising certain systems based on
general-purpose AI models, particularly where the model and system are built by the
same provider. Centralising enforcement for the most complex systems is meant to
avoid 27 different interpretations of the same rules and give cross-border providers a
single point of reference. At the same time, providers who classify certain systems as
low-risk (for example, purely internal, ancillary tools) would no longer have to register
them in the EU AI database, removing what many saw as \u201cpaperwork without benefit\u201d.<\/p>\n

<\/p>\n

5. Grace period for watermarking and transparency<\/h4>\n

Finally, there is a more pragmatic approach to transparency and fairness. Providers
placing AI systems on the market before August 2026 benefit from a six-month grace
period to meet watermarking and content-labelling obligations, pushing the effective
deadline to February 2027. In parallel with the GDPR changes, the AI framework
explicitly recognises the need to process some sensitive data for bias detection and
mitigation, under tight safeguards.<\/p>\n

<\/p>\n

What should organisations take away?<\/h3>\n

The Digital Omnibus does not rewrite the AI Act, but it does make it more manageable.
High-risk rules are still coming, but oversight of the most powerful systems is more
centralized, and the law will be more explicit about when and how data, including
sensitive data, can be used to build fairer systems. For businesses, this is a window of
opportunity: to map AI use cases against Annex I and III, revisit data and model-training<\/p>\n

strategies in light of the proposed legitimate-interest and special-category data
flexibilities, and design phased compliance plans that assume the Omnibus will land in
some form \u2013 even if the details shift in trilogue.<\/p>


<\/p>

Author: Adina Ponta<\/i><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

The EU\u2019s new \u201cDigital Omnibus\u201d proposes major updates to Europe\u2019s digital rulebook, including targeted amendments to the AI Act. The goal: reduce overlapping obligations, cut compliance costs, and make the framework more innovation-friendly without dismantling existing protections.<\/p>","protected":false},"author":9,"featured_media":10729,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[60],"tags":[],"class_list":["post-10727","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/legalaccelerators.com\/ro\/wp-json\/wp\/v2\/posts\/10727","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/legalaccelerators.com\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/legalaccelerators.com\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/legalaccelerators.com\/ro\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/legalaccelerators.com\/ro\/wp-json\/wp\/v2\/comments?post=10727"}],"version-history":[{"count":22,"href":"https:\/\/legalaccelerators.com\/ro\/wp-json\/wp\/v2\/posts\/10727\/revisions"}],"predecessor-version":[{"id":10751,"href":"https:\/\/legalaccelerators.com\/ro\/wp-json\/wp\/v2\/posts\/10727\/revisions\/10751"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/legalaccelerators.com\/ro\/wp-json\/wp\/v2\/media\/10729"}],"wp:attachment":[{"href":"https:\/\/legalaccelerators.com\/ro\/wp-json\/wp\/v2\/media?parent=10727"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/legalaccelerators.com\/ro\/wp-json\/wp\/v2\/categories?post=10727"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/legalaccelerators.com\/ro\/wp-json\/wp\/v2\/tags?post=10727"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}