The Digital Omnibus package split into two tracks. The AI track became law as Regulation (EU) 2026/1744 on 27 July 2026. The data track - the Commission's Digital Omnibus Regulation proposal of 19 November 2025, which would amend the GDPR and move cookie consent rules from the ePrivacy Directive into it - remains in first reading, with no final text in sight.
In the European Parliament, the joint Civil Liberties (LIBE) and Industry (ITRE) committees published their draft report on 22 June 2026 and discussed it on 13 July. By the 15 July deadline, more than 1,750 amendments had been tabled. The co-rapporteurs did not propose key amendments to the GDPR and ePrivacy elements - such as the definition of personal data or the cookie provisions - leaving them to negotiations between the committees.
In the Council, a vote in COREPER II to approve the Council's negotiating mandate was cancelled after Member States could not agree on open issues, and no trilogue negotiations have begun. Commentators do not expect final adoption of the data provisions before late 2026 at the earliest, and the proposal may still change substantially.
Until the text is agreed and in force, the current rules apply unchanged: the GDPR as it stands, and national ePrivacy law - in Ireland, S.I. 336/2011, enforced by the Data Protection Commission, and in the UK, the Privacy and Electronic Communications Regulations as amended by the Data (Use and Access) Act 2025.
Acompli perspective: Proposals change, and some of the most debated GDPR amendments - including the definition of personal data - are still open. Organisations should plan against the rules in force rather than re-engineer consent or records around a draft. That means keeping records of processing and lawful bases current under the GDPR as it stands, and screening direct marketing against today's ePrivacy rules with PECR review. Our PECR and ePrivacy requirements guide tracks what the Omnibus would change if adopted.