European UnionEuropean UnionProposalCOM(2025) 837

Digital Omnibus (data, GDPR, ePrivacy, NIS2 simplification)

Proposed regulation that amends the GDPR, the ePrivacy Directive, NIS2 and the Data Act to simplify EU rules on cookie consent, incident reporting and data sharing, and folds several data laws, including the Data Governance Act, into the Data Act.

Body

European Commission

Session

10th parliamentary term

Introduced

Nov 19, 2025

Topics

DataPrivacyCyberPlatforms

Related

European Union

European Unionunverified

Keeping Internet Digital Spaces Accountable and Trustworthy Act

The European Commission adopted a legislative proposal aimed at strengthening the protection of children online.

ProposedNov 7

European Union

European Unionunverified

Digital Services Act TikTok Investigation

The European Commission preliminarily found TikTok in breach of the Digital Services Act over harmful algorithmic rabbit hole effects in its recommender system.

RuledNov 6

European Union

European Unionunverified

Digital Legislation Overhaul Package

The Council of the European Union agreed on its negotiating position regarding updates to data protection, cookie, data sharing, and incident reporting rules.

Passed one chamberOct 23

European Union

European UnionCOM(2026) 11

Cybersecurity Act 2 (revision of the Cybersecurity Act)

Proposed regulation that would replace the 2019 Cybersecurity Act, strengthening ENISA, simplifying the EU cybersecurity certification framework, and adding measures to reduce ICT supply chain risks from high-risk third-country suppliers.

ProposedSep 18

European Union

European UnionRegulation (EU) 2023/2854

Data Act

Sets rules on who can access and use data generated by connected products and related services, on business-to-government data sharing in exceptional need, and on switching between cloud and data processing services.

In forceSep 12

European Union

European UnionRegulation (EU) 2024/2847

Cyber Resilience Act

Sets mandatory cybersecurity requirements for hardware and software products with digital elements sold in the EU, including vulnerability handling and incident reporting duties for manufacturers.

In forceSep 11

European Union

European UnionRegulation (EU) 2026/1881

Interim ePrivacy derogation to combat online child sexual abuse (2026 re-adoption)

Restores, until 3 April 2028, a temporary derogation from the ePrivacy Directive that lets messaging and other communications providers voluntarily detect, report and remove online child sexual abuse material, after the earlier interim regulation expired on 3 April 2026.

In forceJul 31

European Union

European UnionRegulation (EU) 2022/1925

Digital Markets Act

Sets obligations and prohibitions for large online platforms designated as gatekeepers, such as bans on self-preferencing and anti-steering, and requirements on interoperability and data use.

In forceJul 23

Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.