The European Commission (the Commission), on 16 September 2025, launched a call for evidence from the public and stakeholders on simplifying EU legislation in the upcoming Digital Omnibus Digital package – digital omnibus, in respect of data, cybersecurity and artificial intelligence (AI). 

What is the Digital Omnibus?

The Digital Omnibus (also known as the Digital Package on Simplification), establishes the Commission's digital simplification agenda and proposes a first set of measures to cut the administrative burden on businesses. Immediate measures under consideration include amendments to, and simplification of:

• data acquis (Data Governance Act, Free Flow of Non-Personal Data Regulation, Open Data Directive)
• rules on cookies and other tracking technologies laid down by the ePrivacy Directive
• cybersecurity related incident reporting obligations
• the smooth application of the EU AI Act rules
• other aspects related to electronic identification and trust services under European Digital Identity Framework, including in view of the regulatory alignment with the forthcoming proposal for an EU Business Wallet and applying the “one in, one out” principle

The Digital Omnibus will launch a coherent strategy that addresses concerns of “coherence, compliance costs, administrative burdens and consistency at multiple levels, including immediate streamlining of the rules through the Digital Omnibus, but also further assessments…to support the harmonised application of the rulebook and a simpler compliance framework for businesses in Europe.”

What’s next?

This call for evidence builds on three earlier related initiatives on: (1) the Data Union Strategy and its regulatory simplification plans (a forthcoming EU initiative for data, to promote AI innovation by improving data access, streamlining regulations, and addressing international data flows, see: A European strategy for data | Shaping Europe’s digital future); (2) a review of the Cybersecurity Act (which strengthens the EU Agency for cybersecurity and establishes a cybersecurity certification framework for products and services: EU Cybersecurity Act | Shaping Europe’s digital future); and (3) the Apply AI strategy (which aims to boost new industrial uses of AI and improve the delivery of public services, fostering innovation and competitiveness Apply AI Strategy – strengthening the AI continent).

The call for evidence is open for public feedback until 14 October 2025, with the Commission adoption of the Digital Omnibus planned for Q4 of 2025. We are monitoring the outcome of this consultation and the progression of the Digital Omnibus.