Digital Omnibus Proposal: Major EU Digital Laws to be Streamlined
Dposphere
On 19 November 2025, the European Commission released the Digital Omnibus package, a comprehensive proposal to reform and consolidate major pieces of EU digital regulation. The Omnibus seeks to update and align the GDPR, Data Act, AI Act, and other laws into a more cohesive framework — easing compliance burdens, harmonising definitions, and introducing a unified incident reporting approach across EU digital legislation.
Among the notable proposals:
-
Extending GDPR breach notification timeframes from 72 to 96 hours for high-risk breaches and standardising notification templates.
-
Creating a Single EU Reporting Portal (SEP) for cybersecurity and privacy incidents to satisfy multiple regulatory requirements with one submission.
-
Strengthening trade secret protections and cloud portability.
This initiative could reshape how organisations approach data governance, cybersecurity reporting, and cross-directive compliance.
🔗 Reporting on Digital Omnibus — Commission information via legal analysis summaries sidley.com+1
Dposphere
Recent Post
The UK’s Information Commissioner’s Office has reprimanded ACRO, the Criminal Records Office, following cybersecurity failures involving
The European cybersecurity certification ecosystem is continuing to develop as organizations face growing pressure to demonstrate
The European Union Agency for Cybersecurity (ENISA) announced that it is expanding its role within the
