Digital omnibus: the Commission proposes simpler AI, cybersecurity and data rules

2025-11-19 · Publisher : Commission européenne · Domain : Industry 4.0 & 5.0

The Commission presents a digital package: an omnibus simplifying AI, cybersecurity and data rules, a single incident-reporting entry point and European Business Wallets. Up to EUR 5 billion in savings targeted by 2029.

What changes

  • High-risk AI rules tied to availability of standards, with a delay of at most 16 months.
  • AI Act simplifications extended to small mid-caps.
  • Single entry point for incident reporting (NIS2, GDPR, DORA…).
  • Up to EUR 5 billion in administrative savings by 2029.
  • EU-level regulatory sandbox and real-world testing, notably in automotive.

### Background On 19 November 2025, the European Commission presented a **digital package** (press release IP/25/2718) centred on a **digital omnibus** simplifying existing rules on artificial intelligence, cybersecurity and data. It comes with a Data Union Strategy and **European Business Wallets**. ### Timeline - **19 November 2025**: Commission proposals. - **7 May 2026**: political agreement on the AI part (press release IP/26/1024). - **24 July 2026**: Regulation (EU) 2026/1744 (AI omnibus) published in the OJ, pushing back high-risk rules and moving machinery to a sectoral approach. ### Why it matters Three points matter for industry. First, high-risk AI rules are tied to the availability of standards and support tools, with a delay capped at 16 months: breathing room for machine makers embedding AI. Second, a **single entry point** should let companies meet all incident-reporting obligations (NIS2, GDPR, DORA…) at once. Third, SME simplifications extend to small mid-caps, and real-world testing gets easier, notably in automotive. The Commission puts savings at up to **EUR 5 billion** by 2029. ### Key takeaway Brussels does not abandon the AI Act or NIS2, but eases their implementation and pushes back the heaviest deadlines for industry.

Links

Tags : Réglementation, UE, IA, Cybersécurité OT, Simplification