The article examines the EU’s proposed Digital Omnibus, published in November 2025, which seeks to reduce regulatory complexity across the EU’s digital framework, with a particular emphasis on the intersection between the GDPR and the AI Act. The proposal adopts a “simplicity by design” approach intended to support competitiveness, innovation, and cost-efficient compliance, while maintaining the EU’s high standards of protection. This initiative aims to refine the existing digital regulatory framework by removing unnecessary barriers to AI development while safeguarding fundamental rights and protections. Key proposals clarify when personal and sensitive data may be processed for AI training and bias mitigation. They establish safeguards for residual sensitive data that cannot be removed without disproportionate effort, permit limited biometric verification under user control, and clarify the conditions under which reliance on legitimate interests may be applicable to AI-related processing. Overall, the Digital Omnibus represents a measured approach to simplify EU digital law, aiming to balance robust data protection with the EU’s ambition of promoting responsible and competitive AI innovation.
To read the full article, please visit Lexology and Mondaq.
For more information, please reach out to Avgi Michael and Anastasios Kostekoglou.