EDPB and EDPS publish joint opinion on AI Digital Omnibus package
21/01/2026 | EDPB
The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) have issued a Joint Opinion about the European Commission’s Digital Omnibus on AI package. While supportive of administrative simplification, the regulators warn that these efforts must not compromise the protection of fundamental rights.
In this regard, they express concern over a proposal to allow providers of any AI system to process special categories of personal data for bias detection. The opinion recommends restricting this to specific situations in which the adverse effects of bias are "sufficiently serious."
The regulators also oppose removing registration requirements for high-risk AI systems when providers self-classify as non-high risk. They argue this would diminish accountability and encourage organisations to claim exemptions to avoid public scrutiny. To promote innovation, the creation of EU-level regulatory sandboxes is welcomed, though the opinion insists on the direct involvement of member state data protection authorities (DPAs) to oversee data processing and ensure legal certainty. They also recommend that the EDPB be given an advisory role and observer status on the EU AI Board.
Further recommendations include maintaining the existing duty for AI developers and users to ensure AI Literacy among their staff, rather than shifting this responsibility entirely to member states. Meanwhile, the regulators also caution against postponing core provisions for high-risk systems under the Artificial Intelligence Act (AI Act), suggesting that transparency requirements should adhere to the original timeline, given the rapid pace of technological change.
Training Announcement: Freevacy offers a range of independently recognised professional AI governance qualifications and AI Literacy short courses that enable specialist teams to implement robust oversight, benchmark AI governance maturity, and establish a responsible-by-design approach across the entire AI lifecycle. Find out more.
What is this page?
You are reading a summary article on the Privacy Newsfeed, a free resource for DPOs and other professionals with privacy or data protection responsibilities helping them stay informed of industry news all in one place. The information here is a brief snippet relating to a single piece of original content or several articles about a common topic or thread. The main contributor is listed in the top left-hand corner, just beneath the article title.
The Privacy Newsfeed monitors over 300 global publications, of which more than 6,250 summary articles have been posted to the online archive dating back to the beginning of 2020. A weekly roundup is available by email every Friday.