On October 21, 2026, the Council of the European Union adopted its negotiating mandate on the Digital Omnibus, a legislative package aimed at simplifying the European regulatory framework governing personal data, electronic communications privacy and cybersecurity.

The main proposed changes include provisions on pseudonymisation, the processing of personal data for the development and use of artificial intelligence, data subject rights requests, and personal data breach notification requirements.

The Council also supports expanding the circumstances in which cookies may be used without consent and proposes establishing national entry points to coordinate cybersecurity incident reporting.

The proposed amendments are not yet applicable: the text represents the Council's negotiating position and must still be considered by the European Parliament.