EDPB-EDPS Joint Opinion 2/2026 (Digital Omnibus, GDPR)

EDPB-EDPS Joint Opinion 2/2026 on the Proposal for a Regulation as regards the simplification of the digital legislative framework (Digital Omnibus)

The Joint Opinion assesses the Commission's Digital Omnibus proposal's amendments to the GDPR, addressing changes to the definition of personal data, the use of legitimate interest and special-category-data exemptions in AI development, limitations to data subject access requests, transparency exemptions, automated decision-making, data breach notification, and data protection impact assessments. It raises significant concerns about narrowing the definition of personal data, while welcoming clarifications on scientific research processing and biometric verification exemptions.