EU Digital Omnibus Proposal to Weaken GDPR Protections for AI and Cookie Tracking

The European Commission is preparing to introduce the "Digital Omnibus" legislative package, which includes significant amendments to the General Data Protection Regulation (GDPR) and related digital privacy laws. Leaked drafts of the proposal reveal changes that privacy advocates argue would create major loopholes, particularly by relaxing rules on pseudonymized data and shifting cookie regulation from the ePrivacy Directive to the GDPR. Critics, including Max Schrems and privacy groups like Noyb, warn that these reforms would undermine existing privacy protections, making it easier for companies—especially large tech and advertising firms—to exploit personal data for commercial purposes. The proposed amendments would also allow broader processing of cookie-derived data under a "closed list of low-risk purposes" or other legal bases, moving away from the current strict opt-in requirements.

Privacy experts contend that these changes could violate European Court of Justice rulings and the EU Charter of Fundamental Rights, representing the most significant attack on European privacy since the GDPR's inception. The official unveiling of the Digital Omnibus package is expected on November 19, 2025, and the reforms have sparked strong opposition from privacy advocates who believe the legislative process is being rushed and lacks proper oversight, potentially eroding the rights of EU citizens in favor of industry interests.