Digital Omnibus: European companies set out nine fixes to make simplification work

As the European Parliament prepares its position on the Digital Omnibus, EuroCommerce and 15 other business associations share with MEPs nine fixes to make the law work for European companies.

The message is clear: the Omnibus should be more than an administrative clean-up. Two years after the Draghi report, it is a chance to create the right conditions for applied research, investment in AI and data-driven innovation, while keeping privacy protection strong.

Meaningful consent, not centralised consent

Centralising consent at browser or operating-system level risks weakening businesses’ direct relationship with their customers and overlooking the context in which people make privacy choices. Consent rules should remain meaningful, proportionate and workable.

One rulebook for incident reporting

Simplification must be real. Companies operating across Europe should be able to report cybersecurity incidents once, through a genuine Single Entry Point, rather than navigating multiple reporting channels and requirements.

Keeping data sharing workable

The coalition calls for stronger protection of trade secrets in mandatory data-sharing situations and clearer, more workable rules for access to non-personal data.

Legal certainty for AI and research

Companies need to be able to rely on legitimate interest to train AI models, prevent fraud and carry out applied research. The letter asks to codify the relative approach to personal data, in line with the Court's case law, and to incentivise companies in using privacy-enhancing technologies (PETs), supported by open standards.

Done well, the Digital Omnibus will boost data-driven and AI innovation across Europe, cut compliance costs, while keeping privacy protection strong. Simpler rules and strong protection should reinforce each other, so that Europe becomes a place where companies choose to stay, scale and foster talent.