Digital Omnibus: Getting Data Protection Right

As the Council and the European Parliament examine the Digital Omnibus proposal, it is crucial that co-legislators deliver a text that genuinely improves legal certainty for businesses, while supporting innovation and consumer trust.

Europe is investing heavily in data-driven products and artificial intelligence. To do so responsibly and at scale, insurers need a clear, predictable, and workable data protection framework. Since its entry into application in 2018, the General Data Protection Regulation (GDPR) has become a global benchmark. Yet the EU's digital landscape has evolved significantly since then, with new technologies reshaping how companies work and how data is processed.

The European Commission's targeted amendments to the GDPR aim to address practical shortcomings that have emerged since its implementation. The objective is not to lower existing protections, but to clarify core concepts in light of technological progress, reduce legal uncertainty, and make the framework more operational for businesses of all sizes.

Preserving the Commission's approach is critical to keeping data-driven innovation accessible to European companies and to supporting growth and competitiveness of the EU digital single market.

Insurance Europe has developed a short paper identifying key areas where the Digital Omnibus can strengthen legal clarity and improve the day-to-day functioning of the GDPR. These adjustments are essential to ensure that data protection rules continue to support Europe's digital transformation and consumer trust.

Read our suggestions here