White & Case partner Tim Hickman was featured in Thomson Reuters Regulatory Intelligence, providing expert commentary on the EU Digital Omnibus Package and its implications for businesses operating in Europe. The article discusses the European Commission's recent proposals to simplify and, in some cases, delay the implementation of key digital and AI regulations, including amendments to the GDPR, the e-Privacy Directive, and the EU AI Act.
The article also covers significant proposed changes, such as:
- Clarifying when pseudonymised information is considered "personal data" under the GDPR,
- Extending the data breach reporting deadline from 72 to 96 hours,
- Introducing a single-entry point for incident reporting across multiple EU regimes,
- Permitting greater use of special categories of data for AI system development,
- And proposing phased delays to enforcement of high-risk AI system rules.
Tim highlights that while these changes are broadly welcomed by businesses, uncertainty remains regarding the timing of enforcement and the practical impact of the new reporting mechanisms.
Reproduced with permission from Thomson Reuters Regulatory Intelligence. This article was first published here.
Any views expressed in this publication are strictly those of the authors and should not be attributed in any way to White & Case LLP.
This publication is provided for your convenience and does not constitute legal advice. This publication is protected by copyright.
