News
and Announcements
from S&K Brussels
from S&K Brussels
November 13, 2025
In this webinar, we will analyze the key amendments and objectives of the EU Digital Omnibus Bill to be published by the European Commission on November 19, and provide insights into the actions and considerations that Japanese companies should take into account.
A draft of the "EU Digital Omnibus" bill, scheduled for official publication by the European Commission on November 19, 2025, has been widely leaked in Brussels. This leak reveals the full scope of proposed amendments to the EU's GDPR, Data Act, and AI Act. The amendments aim to overhaul the EU's data protection and AI regulation framework and are considered the most comprehensive since the implementation of the GDPR. The scope of these changes exceeds initial expectations and has caused significant surprise among data protection professionals in Brussels.
The proposed changes include a redefinition of "personal data" in the GDPR, the integration of cookie consent rules into the GDPR based on the ePrivacy Directive, and the introduction of machine-readable opt-in/out signals at the browser and OS level. It also proposes recognizing personal data processing for AI model training as a new legal basis while restructuring the definition of sensitive data, highlighting the intersection of AI and data protection.
Additionally, the draft limits the obligation to report personal data breaches to "high-risk" cases, extends the notification deadline to 96 hours, and designates ENISA as the EU's central point of contact for breach reports. The proposal also includes the creation of a common EU list of processing activities subject to mandatory Data Protection Impact Assessments (DPIA). Regarding the AI Act, it strengthens the AI Office's supervisory authority, expands exceptions for SMEs, and introduces transitional measures for watermarking obligations, balancing regulatory oversight with practical burden reduction.
These amendments directly affect data protection, privacy, and AI governance practices within the EEA, and they require Japanese companies to reassess their compliance strategies for both data protection and AI regulation.
◆Application URL: https://kokc.jp/e/eudigital20251121/
◆Fee: Free of charge
◆Language: Japanese
◆Application deadline:
Thursday, 20 November 2025 at 17:00 PM ((Japan time)
◆Participants
| Date | November 21, 2025 14:00-15:00 |
|---|---|
| Venue | Online |
| Lecturer | Managing Director & Partner, S&K Brussels LPC Mr. Takeshige Sugimoto |
| Organizer | S&K Brussels LPC |
| Business Field | EU AI, EU GDPR, EU Data Act |