European Union Drafted Updated Digital Omnibus Rules
The latest legislative proposal clarifies AI data processing limits and updates trade secret protections.
Updated on Oct. 5, 2026 in Artificial Intelligence
Live Poll
Do you support the proposed EU changes to data protection and cookie consent regulations?
The European Union released a revised draft of its Digital Omnibus on October 2, 2026, aimed at updating digital regulatory obligations. The draft formally clarifies that AI development or operational requirements do not grant an automatic legal basis for processing personal data.
Why it matters
The proposal addresses long-standing regulatory uncertainty by curbing how developers justify data usage under the guise of AI training. These changes directly impact the legal frameworks governing data protection and commercial trade secrets within the European digital market.
The draft introduces a shortened waiting period for repeat cookie-consent requests to streamline user interactions. It also establishes clearer thresholds for the protection of trade secrets compared to the existing digital simplification framework.
The players
European Union
A supranational political and economic union that establishes regulatory frameworks for digital markets and data privacy.
The details
The regulatory update amends the existing digital simplification package by revising specific definitions regarding data protection. Notably, the text stipulates that the functional requirements of building or operating AI models do not supersede personal data processing constraints. This forces developers to substantiate their legal basis for training data independently, rather than assuming blanket permission for technological development.
Timeline
October 2, 2026: Date the revised Digital Omnibus draft was released.
October 7, 2026: Date national ambassadors are expected to review the document.
The Tech Race
This draft aligns with the broader push to harmonize digital market rules across the European Union. It follows the precedent set by the Digital Services Act and seeks to solidify internal regulatory consistency regarding AI and trade secrets.
Users will notice a reduction in the waiting duration for repeat cookie-consent requests as current rules are streamlined. Developers and enterprises must now prepare for stricter documentation requirements when utilizing personal data for AI training processes.
The takeaway
The draft shifts the legal burden toward AI operators, requiring clear justification for data processing rather than blanket operational exemptions. Stakeholders should track the outcome of the review by national ambassadors on October 7, 2026, to understand the final regulatory requirements.
Further reading
For broader context on evolving regulatory frameworks, see Artificial Intelligence.
Live Poll
Do you support the proposed EU changes to data protection and cookie consent regulations?
