At the Tech Breakfast, we listened to Josefin Karlström from LA Partners, sharing what is new when it comes to the GDPR Omnibus: The EU is planning a “GDPR Omnibus” – but what does that mean?
Short version: it is not a new GDPR. It is a tune-up of the existing one.
The European Commission’s Digital Omnibus package (Nov 2025) proposes targeted updates to GDPR as part of a broader push to simplify digital regulation and boost innovation.
So, what’s changing?
- With Omnibus, we move from a strict to a more practical interpretation.
Clarifications around what counts as “personal data” (based on what’s realistically identifiable for a given company). - We also move from an admin-heavy to a more streamlined processes with less bureaucracy in areas like breach reporting and documentation.
- We are used to delivering our consent everywhere. This is becoming more flexible now. The use of data will be easier, for things like AI training (under legitimate interest in some cases).
- GDPR was considered fragmented, with Omnibus it becomes more harmonized. With Standardised DPIAs, clearer rules, and more EU-wide consistency (DPIA = Data Protection Impact Assessment, a structured risk assessment for personal data use).
- Many individuals have been experiencing ‘cookie fatigue’. We will now see new models with fewer pop-ups, more browser-level consent and machine-readable preferences.
So… what’s the difference vs. original GDPR?
The original GDPR (2018) was about strong rights and accountability.
The Omnibus is about making those rules easier to apply in a digital plus an AI-driven world reducing friction for businesses but keeping the core principles intact (at least officially).
The fundamentals stay the same: lawful basis, transparency, user rights.
What does this mean in practice?
For companies, startups and SME’s it means less, admin and more clarity in complex data-sharing setups. It also means new opportunities around AI and data use. However, there is also a new complexity in areas like AI governance and automated decisions
For individuals, we will potentially see fewer consent banners, but our rights will remain strong on paper. Possibly, it will be less control in practice (depending on how changes are implemented).
