The European Union’s proposed Digital Omnibus Package, unveiled in November 2025, represents the most significant planned overhaul of digital regulation since the adoption of the General Data Protection Regulation (Regulation 2016/679) (GDPR) in 2018. Designed to streamline compliance, foster innovation, and harmonise rules across the digital economy, the package introduces targeted amendments to cornerstone legislation, including the GDPR, the ePrivacy Directive (Directive 2002/58/EC), the Data Act, and the AI Act.

Among its most consequential changes are those affecting the concepts of personal data and sensitive personal data. These revisions aim to clarify definitions, reduce ambiguity, and accommodate emerging technologies such as artificial intelligence (AI) and advanced analytics. However, they also raise critical questions about privacy, accountability, and the future of data protection in Europe.