In November 2025, the European Commission proposed its biggest GDPR overhaul yet - part of a wider Digital Omnibus package simplifying GDPR, the AI Act, the Data Act, and EU cybersecurity rules together.