{"id":7993,"date":"2026-01-06T15:23:14","date_gmt":"2026-01-06T15:23:14","guid":{"rendered":"https:\/\/haavind.no\/techinsight\/?post_type=tech-insight&#038;p=7993"},"modified":"2026-01-06T15:23:14","modified_gmt":"2026-01-06T15:23:14","slug":"digital-omnibus-major-amendments-to-the-gdpr-and-several-data-regulations","status":"publish","type":"tech-insight","link":"https:\/\/haavind.no\/techinsight\/tech-insight\/digital-omnibus-major-amendments-to-the-gdpr-and-several-data-regulations\/","title":{"rendered":"Digital Omnibus: Major amendments to the GDPR and several data regulations"},"content":{"rendered":"\t<div class=\"template-tech-insight alignwide has-media wp-block-dekode-hero\">\n\t\t<div class=\"hero__inner\">\n\t\t\t<div class=\"hero__inner_blocks\">\n\t\t\t\t\n<h1 class=\"wp-block-post-title\">Digital Omnibus: Major amendments to the GDPR and several data regulations<\/h1>\n\n<p class=\"t2-ingress wp-block-t2-ingress\">Proposal for a regulation amending the General Data Protection Regulation (COM(2025) 837)<\/p>\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<div class=\"hero__image\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"1920\" height=\"1080\" src=\"https:\/\/haavind.no\/content\/uploads\/sites\/5\/2026\/01\/med_b940c3f3_54a8_4168_979a_6e6815182bdf.jpg\" class=\"attachment-ultra size-ultra\" alt=\"\" srcset=\"https:\/\/haavind.no\/content\/uploads\/sites\/5\/2026\/01\/med_b940c3f3_54a8_4168_979a_6e6815182bdf.jpg 1920w, https:\/\/haavind.no\/content\/uploads\/sites\/5\/2026\/01\/med_b940c3f3_54a8_4168_979a_6e6815182bdf-300x169.jpg 300w, https:\/\/haavind.no\/content\/uploads\/sites\/5\/2026\/01\/med_b940c3f3_54a8_4168_979a_6e6815182bdf-1024x576.jpg 1024w, https:\/\/haavind.no\/content\/uploads\/sites\/5\/2026\/01\/med_b940c3f3_54a8_4168_979a_6e6815182bdf-768x432.jpg 768w, https:\/\/haavind.no\/content\/uploads\/sites\/5\/2026\/01\/med_b940c3f3_54a8_4168_979a_6e6815182bdf-1536x864.jpg 1536w\" sizes=\"(max-width: 1920px) 100vw, 1920px\" \/>\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\n\n<div class=\"haavind-tech-info alignleft wp-block-haavind-tech-info\">\n\t\t\t<div class=\"haavind-tech-info__categories\">\n\t\t\t\t<h4>Category<\/h4>\n\t\t\t\t\n\t\t\t<div class=\"t2-post-dynamic-part is-source-term term-tech-insight-category haavind-tech-meta__category wp-block-t2-post-dynamic-part\"><a href=\"https:\/\/haavind.no\/techinsight\/data-and-privacy\/\" class=\"t2-post-dynamic-part__term\" rel=\"tag\">Data and Privacy<\/a>, <a href=\"https:\/\/haavind.no\/techinsight\/cybersecurity\/\" class=\"t2-post-dynamic-part__term\" rel=\"tag\">Cybersecurity<\/a><\/div>\n\t\t\t<\/div>\n<div class=\"haavind-tech-info__blocks\">\n<h3 class=\"wp-block-heading\">Status<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">EU<\/h4>\n\n\n\n<p>Commission proposal published on 19 November 2025.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">EEA<\/h4>\n\n\n\n<p>Pending<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Norway<\/h4>\n\n\n\n<p>Pending<\/p>\n<\/div>\n<\/div>\n\n\n<h2 class=\"wp-block-heading\" id=\"h-scope\">Scope<\/h2>\n\n\n\n<p>The Digital Omnibus proposal aims to streamline and modernize the EU\u2019s digital regulatory framework by amending, consolidating, and aligning multiple existing digital acts. Its objective is to reduce duplication, clarify obligations, and improve legal certainty across key areas such as data governance, AI, cybersecurity, privacy, digital platforms, and cross-border digital services. The package affects instruments including the AI Act, GDPR, Data Act, NIS2, DORA, Digital Services Act (DSA), Digital Markets Act (DMA), ensuring a more coherent and efficient digital rulebook.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-relevance\">Relevance<\/h2>\n\n\n\n<p>The Digital Omnibus is relevant for enterprises operating in the EU and EEA, including Norway by simplifying compliance obligations. In the context of the GDPR, it is noteworthy that processing of personal data for scientific research purposes and for development and operation of AI systems is softened.<br>For a summary of key amendments to other legal frameworks, see:<\/p>\n\n\n\n<ul>\n<li><a href=\"https:\/\/haavind.no\/techinsight\/tech-insight\/data-act\/\">Data Act<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/haavind.no\/techinsight\/tech-insight\/data-governance-act\/\">Data Governance Act<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/haavind.no\/techinsight\/tech-insight\/nis2-directive\/\">NIS2<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/haavind.no\/techinsight\/tech-insight\/digital-operational-resilience-act-dora\/\">DORA<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/haavind.no\/techinsight\/tech-insight\/eidas-regulation\/\">eIDAS<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/haavind.no\/techinsight\/tech-insight\/critical-entities-resilience-directive\/\">CER Directive<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-key-obligations\">Key obligations<\/h2>\n\n\n\n<p>Key proposed changes to the GDPR include<\/p>\n\n\n\n<ul>\n<li>Clarification of the notion of &#8220;Personal Data&#8221;, by including a condition that an entity must have means &#8220;reasonably likely to be used&#8221; to identify the data subject.<\/li>\n\n\n\n<li>New legal bases for processing special category data for the purposes of developing and operating an AI system, and for the processing of biometric data for identity verification, if exclusive control remains with the data subject.<\/li>\n\n\n\n<li>Exceptions from the obligation to provide information about the processing to data subjects, when personal data is collected in the context of a clear and circumscribed relationship between data subjects and a controller exercising an activity that is not data-intensive.<\/li>\n\n\n\n<li>Definition of scientific research to clarify which further processing shall always be compatible with the original purpose, and exemption from information obligations for scientific research purposes.<\/li>\n\n\n\n<li>Threshold for notification of personal data breaches raised, so that only breaches likely to result in high risk require notification to authorities and data subjects. Deadline for notification extended to 96 hours.<\/li>\n\n\n\n<li>National lists for when DPIAs are required or not required will be replaced by a single EU-level list, adopted by the Commission.<\/li>\n\n\n\n<li>Empowerment of the Commission to define technical means\/criteria for when pseudonymised data is not re-identifiable (and thus not personal data).<\/li>\n\n\n\n<li>The GDPR becomes the sole legal framework for processing of personal data on and from terminal equipment where the user is a natural person (cookies). Consent banners are to be replaced by more effective means: machine-readable and automated consent\/refusal signals (e.g., browser settings\/identity wallets) must be accepted by service providers once standards are available. If users refuse or accept a consent request, controllers must honour those choices for a set minimum period (6 months for a refusal; no repeated popups).<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Commission Proposal (COM(2025) 837)<\/p>\n","protected":false},"featured_media":7996,"menu_order":0,"template":"","meta":{"tech-insight-date":"2025-11-19T16:04:12","footnotes":""},"tech-insight-category":[90,92],"tech-insight-jurisdiction":[83,84],"tech-insight-status":[85,97],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v24.2 (Yoast SEO v24.2) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Digital Omnibus: Major amendments to the GDPR and several data regulations - Haavind Tech Insight<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/haavind.no\/techinsight\/tech-insight\/digital-omnibus-major-amendments-to-the-gdpr-and-several-data-regulations\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Digital Omnibus: Major amendments to the GDPR and several data regulations\" \/>\n<meta property=\"og:description\" content=\"Commission Proposal (COM(2025) 837)\" \/>\n<meta property=\"og:url\" content=\"https:\/\/haavind.no\/techinsight\/tech-insight\/digital-omnibus-major-amendments-to-the-gdpr-and-several-data-regulations\/\" \/>\n<meta property=\"og:site_name\" content=\"Haavind Tech Insight\" \/>\n<meta property=\"og:image\" content=\"https:\/\/haavind.no\/content\/uploads\/sites\/5\/2026\/01\/med_b940c3f3_54a8_4168_979a_6e6815182bdf-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1080\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/haavind.no\/techinsight\/tech-insight\/digital-omnibus-major-amendments-to-the-gdpr-and-several-data-regulations\/\",\"url\":\"https:\/\/haavind.no\/techinsight\/tech-insight\/digital-omnibus-major-amendments-to-the-gdpr-and-several-data-regulations\/\",\"name\":\"Digital Omnibus: Major amendments to the GDPR and several data regulations - Haavind Tech Insight\",\"isPartOf\":{\"@id\":\"https:\/\/haavind.no\/techinsight\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/haavind.no\/techinsight\/tech-insight\/digital-omnibus-major-amendments-to-the-gdpr-and-several-data-regulations\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/haavind.no\/techinsight\/tech-insight\/digital-omnibus-major-amendments-to-the-gdpr-and-several-data-regulations\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/haavind.no\/content\/uploads\/sites\/5\/2026\/01\/med_b940c3f3_54a8_4168_979a_6e6815182bdf-1.jpg\",\"datePublished\":\"2026-01-06T15:23:14+00:00\",\"dateModified\":\"2026-01-06T15:23:14+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/haavind.no\/techinsight\/tech-insight\/digital-omnibus-major-amendments-to-the-gdpr-and-several-data-regulations\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/haavind.no\/techinsight\/tech-insight\/digital-omnibus-major-amendments-to-the-gdpr-and-several-data-regulations\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/haavind.no\/techinsight\/tech-insight\/digital-omnibus-major-amendments-to-the-gdpr-and-several-data-regulations\/#primaryimage\",\"url\":\"https:\/\/haavind.no\/content\/uploads\/sites\/5\/2026\/01\/med_b940c3f3_54a8_4168_979a_6e6815182bdf-1.jpg\",\"contentUrl\":\"https:\/\/haavind.no\/content\/uploads\/sites\/5\/2026\/01\/med_b940c3f3_54a8_4168_979a_6e6815182bdf-1.jpg\",\"width\":1920,\"height\":1080,\"caption\":\"Abstract digital background featuring flowing blue and green lines with glowing yellow particles, evoking a sense of data flow or neural networks.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/haavind.no\/techinsight\/tech-insight\/digital-omnibus-major-amendments-to-the-gdpr-and-several-data-regulations\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/haavind.no\/techinsight\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Digital Omnibus: Major amendments to the GDPR and several data regulations\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/haavind.no\/techinsight\/#website\",\"url\":\"https:\/\/haavind.no\/techinsight\/\",\"name\":\"Haavind Tech Insight\",\"description\":\"Stay ahead with our digital roadmap of EU Tech regulations\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/haavind.no\/techinsight\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Digital Omnibus: Major amendments to the GDPR and several data regulations - Haavind Tech Insight","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/haavind.no\/techinsight\/tech-insight\/digital-omnibus-major-amendments-to-the-gdpr-and-several-data-regulations\/","og_locale":"en_US","og_type":"article","og_title":"Digital Omnibus: Major amendments to the GDPR and several data regulations","og_description":"Commission Proposal (COM(2025) 837)","og_url":"https:\/\/haavind.no\/techinsight\/tech-insight\/digital-omnibus-major-amendments-to-the-gdpr-and-several-data-regulations\/","og_site_name":"Haavind Tech Insight","og_image":[{"width":1920,"height":1080,"url":"https:\/\/haavind.no\/content\/uploads\/sites\/5\/2026\/01\/med_b940c3f3_54a8_4168_979a_6e6815182bdf-1.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/haavind.no\/techinsight\/tech-insight\/digital-omnibus-major-amendments-to-the-gdpr-and-several-data-regulations\/","url":"https:\/\/haavind.no\/techinsight\/tech-insight\/digital-omnibus-major-amendments-to-the-gdpr-and-several-data-regulations\/","name":"Digital Omnibus: Major amendments to the GDPR and several data regulations - Haavind Tech Insight","isPartOf":{"@id":"https:\/\/haavind.no\/techinsight\/#website"},"primaryImageOfPage":{"@id":"https:\/\/haavind.no\/techinsight\/tech-insight\/digital-omnibus-major-amendments-to-the-gdpr-and-several-data-regulations\/#primaryimage"},"image":{"@id":"https:\/\/haavind.no\/techinsight\/tech-insight\/digital-omnibus-major-amendments-to-the-gdpr-and-several-data-regulations\/#primaryimage"},"thumbnailUrl":"https:\/\/haavind.no\/content\/uploads\/sites\/5\/2026\/01\/med_b940c3f3_54a8_4168_979a_6e6815182bdf-1.jpg","datePublished":"2026-01-06T15:23:14+00:00","dateModified":"2026-01-06T15:23:14+00:00","breadcrumb":{"@id":"https:\/\/haavind.no\/techinsight\/tech-insight\/digital-omnibus-major-amendments-to-the-gdpr-and-several-data-regulations\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/haavind.no\/techinsight\/tech-insight\/digital-omnibus-major-amendments-to-the-gdpr-and-several-data-regulations\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/haavind.no\/techinsight\/tech-insight\/digital-omnibus-major-amendments-to-the-gdpr-and-several-data-regulations\/#primaryimage","url":"https:\/\/haavind.no\/content\/uploads\/sites\/5\/2026\/01\/med_b940c3f3_54a8_4168_979a_6e6815182bdf-1.jpg","contentUrl":"https:\/\/haavind.no\/content\/uploads\/sites\/5\/2026\/01\/med_b940c3f3_54a8_4168_979a_6e6815182bdf-1.jpg","width":1920,"height":1080,"caption":"Abstract digital background featuring flowing blue and green lines with glowing yellow particles, evoking a sense of data flow or neural networks."},{"@type":"BreadcrumbList","@id":"https:\/\/haavind.no\/techinsight\/tech-insight\/digital-omnibus-major-amendments-to-the-gdpr-and-several-data-regulations\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/haavind.no\/techinsight\/"},{"@type":"ListItem","position":2,"name":"Digital Omnibus: Major amendments to the GDPR and several data regulations"}]},{"@type":"WebSite","@id":"https:\/\/haavind.no\/techinsight\/#website","url":"https:\/\/haavind.no\/techinsight\/","name":"Haavind Tech Insight","description":"Stay ahead with our digital roadmap of EU Tech regulations","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/haavind.no\/techinsight\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/haavind.no\/techinsight\/wp-json\/wp\/v2\/tech-insight\/7993"}],"collection":[{"href":"https:\/\/haavind.no\/techinsight\/wp-json\/wp\/v2\/tech-insight"}],"about":[{"href":"https:\/\/haavind.no\/techinsight\/wp-json\/wp\/v2\/types\/tech-insight"}],"version-history":[{"count":1,"href":"https:\/\/haavind.no\/techinsight\/wp-json\/wp\/v2\/tech-insight\/7993\/revisions"}],"predecessor-version":[{"id":7997,"href":"https:\/\/haavind.no\/techinsight\/wp-json\/wp\/v2\/tech-insight\/7993\/revisions\/7997"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/haavind.no\/techinsight\/wp-json\/wp\/v2\/media\/7996"}],"wp:attachment":[{"href":"https:\/\/haavind.no\/techinsight\/wp-json\/wp\/v2\/media?parent=7993"}],"wp:term":[{"taxonomy":"tech-insight-category","embeddable":true,"href":"https:\/\/haavind.no\/techinsight\/wp-json\/wp\/v2\/tech-insight-category?post=7993"},{"taxonomy":"tech-insight-jurisdiction","embeddable":true,"href":"https:\/\/haavind.no\/techinsight\/wp-json\/wp\/v2\/tech-insight-jurisdiction?post=7993"},{"taxonomy":"tech-insight-status","embeddable":true,"href":"https:\/\/haavind.no\/techinsight\/wp-json\/wp\/v2\/tech-insight-status?post=7993"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}