Digital Omnibus Report: noyb Analysis & EDPB Opinion

What is happening?

According to noyb, the European privacy rights organisation published version 3 of its Digital Omnibus analysis report on 24 February 2026. This updated report adds commentary on a joint opinion issued by the European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) on the data-related parts of the Digital Omnibus proposal. That joint opinion was published on 11 February 2026, according to noyb.

The Digital Omnibus is a proposal from the European Commission that would, reportedly, make changes to existing EU data protection rules. The noyb report is an independent analysis, not an official regulatory ruling or enforcement decision.

What is noyb saying?

According to noyb, its report compares existing law with what the Commission has proposed, and looks at potential consequences for individuals, businesses and data protection authorities. The organisation has been building on this analysis over time, with earlier versions covering detailed legal findings and recommendations, and this third version now incorporating the EDPB and EDPS joint opinion.

It is worth noting that noyb is a privacy advocacy organisation, not a regulator. This analysis reflects noyb's own reading of the proposal. The Digital Omnibus proposal itself has not yet been adopted or rejected, and no fines or enforcement actions are connected to this report.

Why does this matter?

The Digital Omnibus proposal is still moving through EU institutions. If it eventually becomes law, it could affect how data protection rules apply to businesses across Europe, including in the UK where businesses trade with EU customers or use EU-based tools. For now, UK GDPR and the Data Protection Act 2018 remain the rules you need to follow, and the ICO remains your relevant authority.

If you want to make sure your current data practices are in order while these EU discussions continue, our GDPR compliance checklist and privacy policy requirements guide are good places to start.

You can read the full noyb report at noyb.eu.

What does this mean for your website?

The Digital Omnibus is an EU proposal that has not yet become law, so nothing about your current legal obligations has changed. You still need to follow UK GDPR and the Data Protection Act 2018, and your privacy policy and cookie practices should already meet those standards. If you are unsure whether your website is compliant today, our guide on GDPR and small businesses explains what is expected of you in plain terms.