Proposed Changes to EU Privacy Law Draw Criticism

Critics are raising alarms over proposed changes to Europe's General Data Protection Regulation, or GDPR, which could significantly alter how personal data is handled in the EU. The upcoming Digital Omnibus, set to be presented by EU antitrust chief Henna Virkkunen on November 19, aims to streamline legislation affecting data privacy, including the GDPR, the Artificial Intelligence Act, the e-Privacy Directive, and the Data Act.

Sources indicate that these proposals may grant companies like Google, Meta Platforms, and OpenAI greater leeway to utilize Europeans' personal data for training AI models, based on the concept of legitimate interest.

Furthermore, these changes could allow for exemptions from the current restrictions on processing special categories of personal data, which critics argue could degrade privacy protections significantly.

Austrian privacy group noyb has voiced strong opposition, claiming that the proposed changes amount to a 'death by a thousand cuts' to privacy rights established a decade ago with the GDPR. Max Schrems, a prominent figure in the privacy advocacy community, emphasized that this would represent a considerable downgrading of privacy rights in Europe.

The ramifications of the Digital Omnibus could extend to how access to personal devices is governed, potentially relying on broad exemptions for legitimate interests, including security and audience measurement.

European Digital Rights policy advisor Itxaso Dominguez de Olazabal mentioned that this could fundamentally change the protection of data on personal devices. The proposals are still subject to negotiation with EU member states and the European Parliament, indicating that the fate of these changes remains uncertain.

However, the backlash from privacy advocates underscores the critical importance of maintaining stringent data protection standards in the face of evolving technology and business practices. As the discussion around these proposed changes unfolds, the implications for data privacy in Europe will be closely monitored by stakeholders across the digital landscape.