The European Commission’s proposed Digital Omnibus package signals a welcome recognition that Europe’s digital regulatory framework has become overly complex. Designed to streamline rules across Artificial Intelligence and data governance, the initiative aims to support innovation, reduce administrative burdens, and enhance Europe’s global competitiveness.
However, according to the European Economic and Social Committee, the current proposals represent only a first step. While simplification has begun, significant gaps remain, particularly around legal clarity and practical implementation for businesses operating across the EU.
At the core of the package are amendments to key frameworks, including the General Data Protection Regulation and the AI Act. The intention to facilitate data use for AI development, by clarifying “legitimate interest” and refining definitions of personal data, is a positive move. Similarly, the introduction of a single-entry point for cybersecurity reporting could reduce duplication and improve coordination.
Yet for many businesses, uncertainty persists. Ambiguities around fundamental concepts such as “personal data”, “data holder”, and “placing on the market” continue to create compliance challenges and increase legal risk. Without consistent definitions and clearer guidance, companies face the prospect of fragmented implementation across Member States - undermining the very objective of a functioning single market.
From an Irish business perspective, this matters. Ireland remains a key European hub for technology, data-driven industries, and multinational investment. Companies based here must navigate an increasingly dense regulatory landscape, where overlapping obligations can translate into higher costs, delayed innovation, and operational complexity.
The emphasis on a risk-based approach to AI regulation is particularly important. Proportionate rules, especially for industrial and business-to-business applications, can help ensure that innovation is not unnecessarily constrained, while still safeguarding fundamental rights. Measures such as regulatory sandboxes and simplified compliance pathways for SMEs and scaling companies will be critical in striking this balance.
With key obligations under the AI Act set to apply from August 2026, time is now a critical factor. Businesses require not only legislative clarity, but also sufficient lead-in time to adapt systems, processes, and governance structures.
Looking ahead, Ireland’s role in the Presidency of the Council of the European Union presents a strategic opportunity. By prioritising regulatory coherence and practical implementation, Ireland can help ensure that simplification efforts deliver tangible benefits for businesses across the Union.
For more from the European Economic and Social Committee, see here.