Omnibus VII: What the EU’s new digital simplification package really means for your business
The European Commission’s seventh Omnibus simplification package (Omnibus VII) arrives at a pivotal moment. With digital, AI, data and cybersecurity regulation expanding at record pace, businesses have been grappling with overlapping obligations and rising compliance costs.
Now, supported by the wider Digital Omnibus and Data Union Strategy announced in press release IP/25/2718, the EU is signalling a major shift: less red tape, more clarity, and more room for innovation.
This is not just another regulatory update, it’s a strategic reset designed to make operating in the EU simpler, faster and more competitive.
Key takeaways
AI obligations become more practical and more business-friendly
Many organisations have struggled to prepare for the AI Act because of uncertainty: When do high risk obligations start? Will the documentation burden overwhelm smaller teams?
Omnibus VII and the Digital Omnibus changes directly address these concerns.
What this means for businesses
- Predictable timelines: High risk AI rules will only apply once the Commission confirms that support tools and standards exist giving businesses up to 16 months of breathing room rather than racing against a fixed date
- Lighter paperwork: Simplified technical documentation now applies not only to SMEs but also to small mid cap companies, cutting recurring admin costs
- Easier innovation: New regulatory sandboxes (including an EU wide sandbox in 2028) make it far easier to test AI systems without legal risk
- Consistent oversight: The strengthened AI Office means companies no longer need to navigate inconsistent national interpretations
Bottom line: AI development becomes quicker, cheaper, and far less risky — especially for organisations without large compliance teams.
Cybersecurity Reporting Becomes a Single, Streamlined Process
Right now, incident reporting is a maze: GDPR, NIS2, DORA, sector specific rules… each with its own portal and standard.
What this means for businesses
- One reporting channel for cyber incidents replaces the current multi law patchwork
- Reduced duplication, fewer follow ups, fewer conflicting deadlines
- Lower operational disruption: Compliance teams spend less time coordinating across frameworks and more time on actual risk mitigation
Bottom line: Faster reporting, cleaner processes, and significant reductions in compliance overhead.
Data governance gets clearer and Much Cheaper
The EU’s data rules (Data Act, GDPR, ePrivacy, sector rules) have often been criticised for being complex and fragmented.
Omnibus VII and the new Data Union Strategy simplify this landscape.
What this means for businesses:
- Data Act rules consolidated into one clearer framework
- Major cost savings: Exemptions to cloud switching obligations for SMEs/SMCs are expected to save around €1.5 billion in one off costs
- Ready to use contractual templates reduce the need for bespoke legal drafting
- Easier access to high quality datasets, boosting AI development
- Support tools, including a new Data Act Legal Helpdesk, reduce the guesswork in compliance
Bottom line: Data driven teams can innovate faster, with lower legal friction and far less cost.
Privacy rules aren’t going away but the EU acknowledges that some parts (especially cookie banners) need updating.
What this means for businesses:
- Clearer GDPR guidance lowers legal ambiguity without reducing protection standards
- Cookie fatigue is addressed: Browser level settings and simplified consent flows mean fewer banners and better user experience
Bottom line: Fewer compliance headaches, happier users, and smoother digital journeys.
This is arguably the most business transformative element of the package.
What this means for businesses:
- A single digital identity for companies across all 27 Member States
- Ability to digitally:
- sign, seal, timestamp documents
- exchange verified records securely
- interact with public authorities without in person steps
- Potential savings of up to €150 billion per year through reduced administrative burden
Bottom line: Scaling and operating cross border becomes dramatically easier with fewer forms, fewer delays, smoother onboarding, and faster transactions.
Final thoughts
Across AI, data, privacy, cybersecurity and digital operations, the message is clear: The EU wants to make compliance simpler, not heavier.
For businesses, the benefits are tangible:
- Reduced administrative costs up to €5 billion in savings projected by 2029
- Faster innovation cycles
- Clearer rules and fewer overlaps
- More certainty for product launches
- Lower legal risk
- Easier cross border expansion
Omnibus VII stands out as the most transformative simplification package to date. Unlike earlier Omnibus packages, which targeted discrete sectors such as sustainability, chemicals, environmental law, automotive and food regulation, Omnibus VII restructures the EU’s entire digital governance framework. It consolidates overlapping data laws, streamlines AI Act obligations, harmonises cybersecurity reporting across multiple regulations, and simplifies GDPR breach notification rules. The package also delivers significantly higher projected cost savings and is the first to create a unified compliance architecture across digital, AI and cybersecurity domains.
The content of this page is a summary of the law in force at the date of publication and is not exhaustive, nor does it contain definitive advice. Specialist legal advice should be sought in relation to any queries that may arise.
Related expertise
Law Firm of the Year
We are proud to have been named Law Firm of the Year at the prestigious Legal Business Awards 2024!
Legal Business is the market-leading monthly magazine for the UK and global legal market. Its readership spans the UK, Europe, Asia and the US, and the awards celebrate the very best in the legal profession.
This win is absolute recognition for all the hard work across the firm over the past year.
Contact us today
Whatever your legal needs, our wide ranging expertise is here to support you and your business, so let’s start your legal journey today and get you in touch with the right lawyer to get you started.
Get in touch
For general enquiries, please complete this form and we will direct your message to the most appropriate person.