noyb Grades 1,000+ EU Amendments to Expose MEP Privacy Stances in Digital Omnibus

The non-profit organization noyb has published an analysis of more than 1,000 amendments proposed by Members of the European Parliament regarding the GDPR and ePrivacy Directive. This assessment aims to clarify which legislators are supporting strong privacy protections and which are advocating for changes that benefit technology companies, according to the organization's report.

The Digital Omnibus reform package is officially intended to simplify regulations for EU businesses while maintaining high privacy standards. However, noyb states that lobby groups have influenced the European Commission and many Member States to include provisions that strip away existing rights. The organization argues that these changes primarily benefit Big Tech and AI firms rather than simplifying compliance for general business operations.

Context and Background

The European Commission’s initial proposal for the Digital Omnibus included plans to limit the scope of the GDPR so that online advertising would no longer be covered. It also proposed allowing the use of personal data for artificial intelligence without user consent. According to noyb, EU Member States have largely agreed to incorporate these significant loopholes into the legislation.

Max Schrems, Chairman of noyb, stated that while almost every parliamentarian claims to uphold people’s rights, many actions suggest the opposite. He emphasized that the organization’s goal is to reveal who is working on behalf of citizens versus who is working for big tech under the guise of simplification.

Who Is Affected

EU citizens and journalists are directly affected by the potential weakening of privacy laws through the Digital Omnibus. The complexity of tracking individual legislative actions makes it difficult for the public to identify which MEPs support privacy. noyb’s analysis provides a searchable database to help voters and stakeholders understand the positions of their representatives.

The organization notes that responsibility for saving the GDPR from being undermined now largely rests with the European Parliament. As Member States have agreed to many of the controversial loopholes, the Parliament’s amendments are the final opportunity to preserve current privacy protections before the laws are finalized.

Defender's checklist

Security and IT teams should monitor the progress of the Digital Omnibus legislation to anticipate changes in data handling requirements. Understanding which amendments are being proposed can help organizations prepare for potential shifts in regulatory scope, particularly regarding online advertising and AI data usage.

Background: GDPR

GDPR protects personal data of EU residents globally, while HIPAA safeguards US health information. GDPR applies to any entity handling EU data, whereas HIPAA targets specific US health entities. You must comply with both if you handle EU patient data.

Read the full guide: GDPR vs HIPAA: Key Differences for Data Protection Compliance

What to do and how to stay safe: noyb

• Visit gdpr-omnibus.eu to look up your local MEP and review their specific amendments regarding privacy and simplification.
• Monitor official EU parliamentary records for updates on the Digital Omnibus vote and final legislative text.
• Review current data processing agreements to identify reliance on consent mechanisms that might be affected by new AI loopholes.
• Engage with industry groups that advocate for maintaining strong GDPR protections during the legislative process.

Step-by-step guide: Online Tracking Risks: How Small Firms Lose Data and Regain Control

General security guidance from the InfoSec Ledger newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

What is the Digital Omnibus?

It is a reform package intended to change core EU privacy laws, officially aiming to simplify regulations for businesses while maintaining GDPR protections.

How many amendments did noyb analyze?

noyb analyzed more than 1,000 amendments tabled by Members of the European Parliament for the GDPR and ePrivacy Directive.

Where can I find the grading of MEPs?

The comprehensive grading of every MEP who made amendments is available on the website gdpr-omnibus.eu, searchable by country and political group.