EU countries agree position on simplifying GDPR, cookie and incident-reporting rules
What happened. EU member states agreed their negotiating position on the Digital Omnibus, which keeps the GDPR definition of personal data, clarifies pseudonymisation, adds cookie-consent exemptions and proposes a single entry point for reporting cyber and data incidents. Talks with Parliament start once it adopts its position.
Why it matters. If adopted, the changes could reduce duplicate incident reports and cookie-banner work, and extend breach-notification deadlines. Compliance, security and data teams should follow the negotiations, since the final rules will shape reporting processes, AI data use and privacy programmes.
Source: IAPP ↗