EU simplifies digital legislative framework with omnibus regulation amending GDPR, NIS 2, and other acts

Original title: Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL amending Regulations (EU) 2016/679, (EU) 2018/1724, (EU) 2018/1725, (EU) 2023/2854 and Directives 2002/58/EC, (EU) 2022/2555 and

The European Commission proposes the Digital Omnibus Regulation to amend multiple EU digital laws including GDPR and the NIS 2 Directive, alongside repealing four outdated regulations. The proposal aims to simplify the digital legislative framework by consolidating and harmonizing requirements across data protection, cybersecurity, and digital services. This comprehensive legislative package is intended to reduce compliance fragmentation and create a more coherent regulatory environment for digital operations across the EU.

What changed

• Regulation (EU) 2016/679 (GDPR) is amended as part of the simplification effort, with specific changes to align with broader digital framework objectives
• Directive (EU) 2022/2555 (NIS 2 Directive) is amended to streamline cybersecurity requirements across Union member states
• Regulation (EU) 2018/1724 on single digital gateway requirements is amended
• Regulation (EU) 2018/1725 on data protection for EU institutions is amended
• Regulation (EU) 2023/2854 and Directives 2002/58/EC and (EU) 2022/2557 are amended; four acts are repealed: Regulations (EU) 2018/1807, (EU) 2019/1150, (EU) 2022/868, and Directive (EU) 2019/1024

Who is affected

All EU member states and organizations subject to GDPR and NIS 2 requirements, including data controllers, processors, digital service providers, and entities responsible for managing critical information systems across the Union