EU Digital Package Proposal Promises Red Tape Cuts but Guts GDPR Privacy Rights (www.eff.org)

The European Commission is proposing a “Digital Omnibus” package that aims to reform privacy laws in the EU, particularly the General Data Protection Regulation (GDPR). While the proposal includes beneficial elements like allowing users to set automatic consent preferences across websites, it fundamentally weakens privacy protections by narrowing the definition of personal data. This shift allows different entities to have varying interpretations of what constitutes personal data, potentially leading to confusion and enabling businesses to circumvent GDPR obligations through operational changes rather than genuine data protection. Significantly, the package also privileges AI development by allowing broader processing of personal data under the guise of "legitimate interest," which could create loopholes for sensitive data use. Though the proposal attempts to streamline EU regulations for easier compliance and innovation, it risks creating a complex legal landscape that undermines individual privacy rights. This has raised concerns within the AI/ML community, as the implications could mean less stringent oversight for AI applications while posing risks to data privacy. The proposed changes will require careful evaluation to ensure they don’t compromise fundamental user rights in the pursuit of technological advancement.