News · noyb - European Center for Digital Rights EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Digital Omnibus: EU DPAs reject many proposed changes to the GDPR

Cookies Direct Marketing Telecommunications Right of Access Right of Access Procedures
Feb 11, 2026 Source noyb.eu

Full text

GDPR Policy The EDPB (combining all independent data protection authorities) and the European Data Protection Supervisor (EDPS) published a joint opinion expressing serious concerns about key elements of the proposed GDPR and ePrivacy changes in the so-called “Digital Omnibus” proposed by the European Commission. Specifically, the authorities strongly oppose the proposed narrowing of the definition of personal data. The opinion also question the need for various key proposals, such as the legal basis for AI training and restrictions on the right of access. Many other provisions are seen as not clear enough. The authorities’ feedback is another major blow for the Commission’s attempt to limit the rights of users. Press release by the EDPBJoint opinion by the EDPB and EDPS in full textHighly important input on the Digital Omnibus. With the Digital Omnibus, the European Commission has proposed sweeping changes to the GDPR and the ePrivacy Directive disguised as a “simplification” measure.

How it connects

Related across sources

C-673/17 Bundesverband der Verbraucherzentralen v Planet49 GmbH C-673/17 (Planet49) CJEU Oct 1, 2019 Consent IP Address Lawful Basis
C-119/12 Judgment of the Court (Third Chamber), 22 November 2012.#Josef Probst v mr.nexnet GmbH.#Reference for a preliminary ruling from the Bundesgerichtshof.#Electronic communications — Directive 2002/58/EC — Article 6(2) and (5) — Processing of personal data — Traffic data necessary for billing and debt collection — Debt collection by a third company — Persons acting under the authority of the providers of public communications networks and electronic communications services.#Case C‑119/12. In Case C-119/12, the Court of Justice of the European Union interpreted Article 6(2) and (5) of Directive 2002/58/EC (the ePrivacy Directive) in proceedings between Josef Probst… CJEU Nov 22, 2012 Personal Data Processing Telecommunications
Guidelines 05/2020 consent under Regulation 2016/679 Guidelines on consent Guidelines ·EDPB May 4, 2020 Consent Data Portability Personal Data
Guidelines 2/2023 Technical Scope of Art. 5(3) of ePrivacy Directive Guidelines ·EDPB Oct 16, 2024 Cookies Identification Direct Marketing
C-470/21 La Quadrature du Net and Others v Premier ministre and Ministère de la Culture In Case C-470/21, the CJEU addressed a preliminary reference from the French Conseil d'État concerning La Quadrature du Net and others v. Premier ministre and Ministre de la… CJEU ·Full Court Apr 30, 2024 Right of Access Personal Data Material scope (GDPR)
CJEU: ePrivacy Art. 5(3) covers any info stored on terminal equipment, not just personal The restrictions of Article 5(3) of the ePrivacy Directive apply to any information stored in a terminal equipment, regardless of whether or not it is persona. (¶70) Oct 1, 2019 Cookies Telecommunications Direct Marketing
Related documents