Salta al contenuto principale






Digital Omnibus: How Big Tech Lobbying Is Gutting the GDPR


Cross posted from: feddit.uk/post/40232992

european funds recovery initiative
Search
Search...
Digital Omnibus: How Big Tech Lobbying Is Gutting the GDPR
HOME
Related News

Digital Omnibus: How Big Tech Lobbying Is Gutting the GDPR
Last week we at EFRI wrote about the Digital Omnibus leak and warned that the European Commission was preparing a stealth attack on the GDPR

Since then, two things have happened:

The Commission has now officially published its Digital Omnibus proposal.

noyb (Max Schrems’ organisation) has released a detailed legal analysis and new campaigning material that confirms our worst fears: this is not harmless “simplification”, it is a deregulation package that cuts into the core of the GDPR and ePrivacy.

What noyb has now put on the table

On 19 November 2025, noyb published a new piece with the blunt headline: “Digital Omnibus: EU Commission wants to wreck core GDPR principles

Here’s a focused summary of the four core points from noyb’s announcement, in plain language:

New GDPR loophole via “pseudonyms” and IDs

The Commission wants to narrow the definition of “personal data” so that much data under pseudonyms or random IDs (ad-tech, data brokers, etc.) might no longer fall under the GDPR.

This would mean a shift from an objective test (“can a person be identified, directly or indirectly?”) to a subjective test (“does this company currently want or claim to be able to identify someone?”).

Therefore, whether the GDPR applies would depend on what a company says about its own capabilities and intentions.

Different companies handling the same dataset could fall inside or outside the GDPR.

For users and authorities, it becomes almost impossible to know ex ante whether the GDPR applies – endless arguments over a company’s “true intentions”.

Schrems’ analogy: it’s like a gun law that only applies if the gun owner admits he can handle the gun and intends to shoot – obviously absurd as a regulatory concept.

arzh-CNnlenfrdeitptrues
european funds recovery initiative
Search
Search...
Digital Omnibus: How Big Tech Lobbying Is Gutting the GDPR
HOME
Related News

Digital Omnibus: How Big Tech Lobbying Is Gutting the GDPR
Last week we at EFRI wrote about the Digital Omnibus leak and warned that the European Commission was preparing a stealth attack on the GDPR

Since then, two things have happened:

The Commission has now officially published its Digital Omnibus proposal.

noyb (Max Schrems’ organisation) has released a detailed legal analysis and new campaigning material that confirms our worst fears: this is not harmless “simplification”, it is a deregulation package that cuts into the core of the GDPR and ePrivacy.

What noyb has now put on the table
On 19 November 2025, noyb published a new piece with the blunt headline: “Digital Omnibus: EU Commission wants to wreck core GDPR principles”

Here’s a focused summary of the four core points from noyb’s announcement, in plain language:

New GDPR loophole via “pseudonyms” and IDs
The Commission wants to narrow the definition of “personal data” so that much data under pseudonyms or random IDs (ad-tech, data brokers, etc.) might no longer fall under the GDPR.

This would mean a shift from an objective test (“can a person be identified, directly or indirectly?”) to a subjective test (“does this company currently want or claim to be able to identify someone?”).

Therefore, whether the GDPR applies would depend on what a company says about its own capabilities and intentions.

Different companies handling the same dataset could fall inside or outside the GDPR.

For users and authorities, it becomes almost impossible to know ex ante whether the GDPR applies – endless arguments over a company’s “true intentions”.

Schrems’ analogy: it’s like a gun law that only applies if the gun owner admits he can handle the gun and intends to shoot – obviously absurd as a regulatory concept.

Weakening ePrivacy protection for data on your device

Today, Article 5(3) ePrivacy protects against remote access to data on your devices (PCs, smartphones, etc.) – based on the Charter right to the confidentiality of communications.

The Commission now wants to add broad “white-listed” exceptions for access to terminal equipment, including “aggregated statistics” and “security purposes”.

Max Schrems finds the wording of the new rule to be extremely permissive and could effectively allow extensive remote scanning or “searches” of user devices,ces as long as they are framed as minimal “security” or “statistics” operations – undermining the current strong protection against device-level snooping.

Opening the door for AI training on EU personal data (Meta, Google, etc.)

Despite clear public resistance (only a tiny minority wants Meta to use their data for AI), the Commission wants to allow Big Tech to train AI on highly personal data, e.g. 15+ years of social-media history.

Schrems’ core argument:

People were told their data is for “connecting” or advertising – now it is fed into opaque AI models, enabling those systems to infer intimate details and manipulate users.

The main beneficiaries are US Big Tech firms building base models from Europeans’ personal data.

The Commission relies on an opt-out approach, but in practice:

Companies often don’t know which specific users’ data are in a training dataset.

Users don’t know which companies are training on their data.

Realistically, people would need to send thousands of opt-outs per year – impossible.

Schrems calls this opt-out a “fig leaf” to cover fundamentally unlawful processing.

On top of training, the proposal would also privilege the “operation” of AI systems as a legal basis – effectively a wildcard: processing that would be illegal under normal GDPR rules becomes legal if it’s done “for AI”. Resulting in an inversion of normal logic: riskier technology (AI) gets lower, not higher, legal standards.

Cutting user rights back to almost zero – driven by German demands

The starting point for this attack on user rights is a debate in Germany about people using GDPR access rights in employment disputes, for example to prove unpaid overtime. The German government chose to label such use as “abuse” and pushed in Brussels for sharp limits on these rights. The Commission has now taken over this line of argument and proposes to restrict the GDPR access right to situations where it is exercised for “data protection purposes” only.

In practice, this would mean that employees could be refused access to their own working-time records in labour disputes. Journalists and researchers could be blocked from using access rights to obtain internal documents and data that are crucial for investigative work. Consumers who want to challenge and correct wrong credit scores in order to obtain better loan conditions could be told that their request is “not a data-protection purpose” and therefore can be rejected.

This approach directly contradicts both CJEU case law and Article 8(2) of the Charter of Fundamental Rights. The Court has repeatedly confirmed that data-subject rights may be exercised for any purpose, including litigation and gathering evidence against a company. As Max Schrems points out, there is no evidence of widespread abuse of GDPR rights by citizens; what we actually see in practice is widespread non-compliance by companies. Cutting back user rights in this situation shifts the balance even further in favour of controllers and demonstrates how detached the Commission has become from the day-to-day reality of users trying to defend themselves.

EFRI’s take: when Big Tech lobbying becomes lawmaking

For EFRI, the message is clear: the Commission has decided that instead of forcing Big Tech and financial intermediaries to finally comply with the GDPR, it is easier to move the goalposts and rewrite the rules in their favour. The result is a quiet but very real redistribution of power – away from citizens, victims, workers and journalists, and towards those who already control the data and the infrastructure. If this package goes through in anything like its current form, it will confirm that well-organised corporate lobbying can systematically erode even the EU’s flagship fundamental-rights legislation. That makes it all the more important for consumer organisations, victim groups and digital-rights advocates to push back – loudly, publicly and with concrete case stories – before the interests of Big Tech are permanently written into EU law.



Israeli forces execute two surrendered Palestinians at point-blank range


Israeli forces executed two unarmed Palestinians at point-blank range after they surrendered in the occupied West Bank city of Jenin on Thursday.

The killings were captured on video, which showed the two men emerging from a building with their arms raised and their shirts lifted, clearly indicating they were unarmed and posed no threat to the soldiers.

The troops then shoot them dead.

The Palestinian Health Ministry identified the victims as Al-Muntasir Billah Mahmoud Qassem Abdullah, 26, and Yousef Ali Yousef Asa’sa, 37. They were shot in the Abu Dhahir neighborhood of Jenin.



in reply to Chloé 🥕

... calling them partially responsible for the Nazi genocide is a stretch at best. If I am wrong feel free to educate me with a source.
in reply to VoxAliorum

i’m saying this because the nazis were greatly inspired by the usa’s genocide of Indigenous people for the holocaust, that’s why i wrote "partially" (as opposed to the Gaza genocide, where the usa’s responsibility is much more direct)

obviously I’m not denying the agency and responsibility of germany in the holocaust

in reply to VoxAliorum

The concept of "Lebensraum" literally stems from Manifest Destiny.

The Hitlerites were also very impressed by the Jim Crow laws and racial segregation in the USA


in reply to Spectre


in reply to Spectre

Sad but real.
Questa voce è stata modificata (2 settimane fa)

in reply to Maeve

Hope you have a swift recovery, im personally okay but to be honest with climate exacerbated disasters here it's hard to read the stuff westerners say online it's really inhuman. I like to show it to liberals who tend to get weird when drunk and say they think US does such and such better. It just makes me want to ride the canoe all the way back and clobber people tho. Oh yeah its a bit offbeat I can just give you an email address, i like cheogram and delta chat bc they are nice for being in the mountains and shit with horrible internet, saves downloads for later. Delta chat is actually just a weird clientside email managemebt thing so it can use regular emails
in reply to Avatar of Vengeance

Hm, climate disaster is real, and alarming. Photos of Vietnam are quite shocking, I just checked weather for a few areas, more rain. So many lost, already. How are things in your mountains? I do hope you're safe. I understand your anger toward US in general and callous, flippant USians, and even our ignorance, including mine. I just want you to be ok.

Thank you for your kind wishes, friend. I know others have it much worse and remain grateful for what is right with me, even if it means I have to check myself, occasionally. Please know I think of you often and fondly.

Edit: I'll have to sort something for email. Pretty sure free providers in US won't do. I had a $1/month paid in Germany I let lapse because uhh... They won't do either.

Questa voce è stata modificata (3 settimane fa)


in reply to jankforlife

RT is literally Russian propaganda. If the poster can't find a better source it's not news.
in reply to muzzle

Please recommend me a news outlet that isn't propaganda. CNN? MSNBC? Fox? lol
Questa voce è stata modificata (3 settimane fa)






in reply to jankforlife

Context:

swentr.site is a domain registered in March 2022 and is managed by RU-CENTER, a Russian domain registrar. The domain is associated with ANO “TV-Novosti,” which is the organization behind RT (Russia Today), a Russian state-controlled international news network. The site has been identified as a content mirror or alternative domain for RT, often used to circumvent sanctions or restrictions placed on the main RT domains.[cside +4]

Domain Details

• Registered: March 5, 2022

[whoxy]• Registrar: RU-CENTER (Russia)[cside +1]

• Hosting: ANO “TV-Novosti” (Russia)

[easycounter]• Purpose: Used as a mirror or alternative domain for RT (Russia Today)

in reply to hornedfiend

"Censorship is good, actually"
Questa voce è stata modificata (2 settimane fa)
in reply to jankforlife

About time..... RN (ex-FN) has been peddling hate for over a decade with russian funds. Many of my countrypeople have ceded ground to fascist ideology because of that money. I hear it in the news... in the streets... my own neighbours have started losing their legendary empathy. Having principles is great but we have to defend ourselves at some point. Russia is doing real damage to the minds through their local proxies



Why use a terminal pdf viewer?


I've been using Firefox to view PDFs and it works fine. Recently though I wanted to try something more minimal with vim keybindings. Found two options: Zathura and tdf (terminal pdf viewer).

What I'm curious about is why someone would choose a TUI pdf viewer over a regular one (like Zathura). What are the actual advantages people find in practice. tdf mentions being fast but I wonder if that's something you'd actually notice day to day?

Also I remember seeing screenshots where PDFs looked transparent or matched the terminal colors. Is that actually a feature of some of these viewers ? Maybe someone uses one here?

Tdf seems relatively popular with 1.4k github stars.

in reply to chasteinsect

Huh, I mostly use apvlv and mupdf. They are command line binaries but they have a gui; I don't really see a point in looking at a PDF with something other than a gui.
Questa voce è stata modificata (3 settimane fa)


New to Linux Advice


Ive not had a PC or gaming PC in 15 years. I want to get back into it now.

Im fairly against windows. I'd like to try a Linux system and thought this would be a fun way to get into Linux.

Ive been looking at some black friday sales here Newegg sales

Its been so long since ive looked at PC specs I feel like im completely new. Ive read that an AMD GPU can be easier for Linux so I started there.

So Ive got two questions!

What are some must have specs in you opinion to run most modern games, and would you have a #1 recommend for a prebuilt to get started with?

What disto is best for a total newbie who wants to use it for gaming and eventually transition for anything/everything else?

in reply to BingBong

Even after using PopOS I dont understand the hype. It is Ubuntu-based, meaning that its packages are stale and often quite out of date, which isn't something I would recommend for a gaming distro.

Better to pick one of the following, which are gaming focused, user friendly, and have up-to-date packages for {Mesa, Vulkan, Wine, Kernel, etc}:
- PikaOS
- Bazzite
- Nobara

Edit:
My reason for saying that up-to-date packages are paramount is because a newer kernel supports more features, better performance, new hardware support, less bugs, and the same is true for packages that effect gaming. Desktop environments get better quickly through updates and bug fixes that effect gaming may take a year of more to reach pepetually out of date distros like Ubuntu. It is generally quite important, but less important if you use Steam Flatpak because it is slightly sandboxes.

Questa voce è stata modificata (1 mese fa)
in reply to N.E.P.T.R

Regarding Pop!_OS, (at least historically) it was the easiest distro for Nvidia users. Add to that some neat stuff like a Recovery Partition^[Btw, if you happen to know any other distro that offers something similar, then I'd love to hear about it.] and I can understand where (at least initially) the hype was (IMO justifiably) coming from. Unfortunately, erupting COSMIC DE from the ground hasn't done Pop!_OS well for upkeeping its good name and reputation. I suppose they're lucky that Linux users are seriously delayed when it comes to adjusting their recommendations. (Like how a chunk of peeps continued to proselytize for Manjaro till last year or so.)



I just wanted to compare FOSS Linux budgeting software


Instead YouTube gives me literally nothing but AI spam. :/

I scrolled down a bit more and got this:
i.postimg.cc/fJcPhG45/Screensh…

Scrolled down some more and this:
i.postimg.cc/v1khnhRp/Screensh…

I kept scrolling until I ran out of relevant results. Not a single video was legit. I don't think I've ever seen so much AI slop in one search term and by the gods there is a lot of crap on YouTube.

Anyone have a good comparison video? I'm just wanting a decent comparison of Actual, Firefly III and possibly HomeBank. Feel free to also give me your 2 cents on whatever you use 😀

Questa voce è stata modificata (1 mese fa)
in reply to Thorned_Rose

I don't have a video for you but I've been using Actual for over a year and really like it. I recommend it. Caveat, I very actively interact with my budget (inputting things manually) and cannot speak for it's account linking features.
in reply to iAmTheTot

We just switched from YNAB to actual and my wife really likes it. I host it locally with tailscale so she can access it from her phone anywhere.





Jeffrey Epstein Aided Alan Dershowitz’s Attack on Mearsheimer and Walt’s “Israel Lobby”


The behind-the-scenes campaign of subversion ironically affirmed the key tenets of the Walt and Mearsheimer paper. In other words, wealthy and well-connected men were deploying their financial resources and connections in order to undercut a paper claiming that wealthy and well-connected men were using their wealth and financial resources for the benefit of the state of Israel and against the interests of the United States.
Questa voce è stata modificata (3 settimane fa)



in reply to Sahwa

I’ve been putting off switching because of everything I have setup for work, but next week I have a new laptop arriving and I’ll be wiping the pre-installed windows and chucking probably fedora on it.

Once I have that first one done, I’ll be able to start moving all my others. I have a bunch of Hyper-V VMs that I need to migrate which has been the main cause of my hesitation.

in reply to silt_haddock

Check fan speed volume before and after linux to see how many background AI scrapers were removed lmao.

in reply to NightOwl

They definitely totally care about peace and human life though, and are certainly not cynical opportunists doing their best to prolong two different conflicts because there's money to be made
Questa voce è stata modificata (3 settimane fa)

in reply to Maeve

As well as emotional regulation from an early age (would massively reduce male violence)


Tumblr or Mastodon? Or is there a third service I should use?


So, I have a profile at Tumblr to archive a specific media's contents. (It's in Portuguese)

I currently use tumblr, but is there some other page I should use to get better privacy? I've been considering Mastodon.

in reply to Ŝan • 𐑖ƨɤ

Looking at all the issues Matrix has had for years and is still struggling with, I'm not suprised people prefer to use something else. I've been using Matrix since 2017 and I feel like things don't improve much, unfortunately.
in reply to erebion

Yup. Matrix seems fine as long as you aren't trying to use encryption. If you are, it's been hopelessly broken for... ever.


Reality Check: EU Council Chat Control Vote is Not a Retreat, But a Green Light for Indiscriminate Mass Surveillance and the End of Right to Communicate Anonymously


Cross posted from: feddit.uk/post/40205739

I'm posting this to hopefully stop the posts that keep appearing, suggesting that progress has been made to defeat chat control.
That's not correct.

The article:

Contrary to headlines suggesting the EU has “backed away” from Chat Control, the negotiating mandate endorsed today by EU ambassadors in a close split vote paves the way for a permanent infrastructure of mass surveillance. Patrick Breyer, digital freedom fighter and expert on the file, warns journalists and the public not to be deceived by the label “voluntary.”

While the Council removed the obligation for scanning, the agreed text creates a toxic legal framework that incentivizes US tech giants to scan private communications indiscriminately, introduces mandatory age checks for all internet users, and threatens to exclude teenagers from digital life.

“The headlines are misleading: Chat Control is not dead, it is just being privatized,” warns Patrick Breyer. **“What the Council endorsed today is a Trojan Horse. By cementing ‘voluntary’ mass scanning, they are legitimizing the warrantless, error-prone mass surveillance of millions of Europeans by US corporations, while simultaneously killing online anonymity through the backdoor of age verification.”
**
Continue reading here - patrick-breyer.de/en/reality-c…

in reply to TropicalDingdong

The timeline is here

Currently Denmark pushing it, they hold the EU presidency at the minute. Their minister for justice - Peter Hummelgaard is responsible for the big push and the wording. Specifically trying to pull the wool over the general public.
Ireland are next (they take over in January)
And the minister for justice in Ireland (Jim O'Callaghan) is also in favour of it.

U.N. right to privacy

Office of the High Commissioner for Human Rights - Right to privacy in the digital age

U.N. - Universal Declaration of Human Rights

in reply to Babalugats

Thank you.

But what groups are advocating for this? There is clearly a significant campaign behind this. It doesn't seem at all grassroots.

in reply to TropicalDingdong

At a guess, I'd imagine big tech companies are lobbying as most of the information that they use comes from data gathering. Using data directly from texts etc. Leaves them open to court cases.

theguardian.com/commentisfree/…

The options are limitless to the politicians regarding money making opportunities pushing x,y and z through once our private correspondence and devices are being scanned.

For example, in years to come insurance companies could refuse to pay out on all sorts of claims using that data.
Doctor may have recommended you walk a mile a day and change your diet.
You don't do it, or just miss a day, your life insurance policy is voided.
Car crash not your fault, no payout because you missed something else etc.

I couldn't begin to to guess the amount of ways that this information could be used, but it's a complete u-turn from what the EU was saying only a few years ago

gdpr.eu/what-is-gdpr/

They still recommend using signal - but only internally.

Which in itself is bizarre.

And exempting themselves from being scanned is just showing what they really think.

Questa voce è stata modificata (3 settimane fa)
in reply to Babalugats

I'm trying to learn more about EU politics, and when something like this won't die after being beat down several times, in the US it's almost always some industry lobbying organization.

And a problem we have globally, is that there isn't an organized counter movement in the opposite direction (that privacy is a human right, that this isn't a path to security, that states need to be restrained and restricted in their tendencies towards authoritarianism).

Without that countermovement, it's almost inevitable something like this will pass as the lobbying organization can long outlive the current generation of activists or politicians who see the problems with something like chat control.

in reply to Babalugats

We have to be the ones that continue building the movement. Plenty of us already are but with each of us active, and getting others active-connected it will help so much. We all can way more in a healthy way get things done. Let's not make it easy for them at all.

Getting people to switch to Matrix, & Stoat for real-time collaboration.

Piefed for overview and more organization by having people doing.

Pixelfed, & Loops by Pixelfed for Live-Streaming Incidents.

Also, to stop them infecting people's minds with their virus

in reply to Batmorous

I agree. A proper counter movement is needed.

Big American corporations are heavily lobbying EU council and governments.
Transparency is not working, EU council are rolling back on GDPR, massively eroding our privacy, which is irreversible.

With the likes of Trump in charge the US are not trustworthy with any data. The data that they already take illegally is too much.

The UDHR article 12 is supposed to protect our privacy.

We need a counter movement big enough to scare the politicians when they start bending to the Big-Tech.
They are not in the least bit worried as things stand now.

Peter Hummelgaard (among others) and his arrogance does not seem even a little concerned about his position.

Questa voce è stata modificata (2 settimane fa)
in reply to Babalugats

Thats why everyone needs to be active with us and get more people moving. The more we do the more we win!! They are already scared that's why they try so hard now.
in reply to Babalugats

I posted this before, but it doesn’t even seem to be voluntary at all, from what I can tell from the draft:

“Upon that notification, the provider shall, in cooperation with the EU Centre pursuant to Article 50(1a), take the necessary measures to effectively contribute to the development of the relevant technologies to mitigate the risk of child sexual abuse identified on their services. […]”

“In order to prevent and combat online child sexual abuse effectively, providers of hosting services and providers of publicly available interpersonal communications services should take all reasonable measures to mitigate the risk of their services being misused for such abuse […]”

These quotes sound mandatory, not voluntary. And let’s look what these technologies referenced are:

“In order to facilitate the providers’ voluntary activities under Regulation (EU) 2021/1232 compliance with the detection obligations, the EU Centre should make available to providers detection technologies […]”

“The EU Centre should provide reliable information on which activities can reasonably be considered to constitute online child sexual abuse, so as to enable the detection […] Therefore, the EU Centre should generate accurate and reliable indicators,[…] These indicators should allow technologies to detect the dissemination of either the same material (known material) or of different new child sexual abuse material (new material), […]”

Oops, it sounds again like mandatory scanning.

Source: cdn.netzpolitik.org/wp-upload/…

The new draft seems to pretend better to look less mandatory, but it still looks mandatory to me. Feel free to correct me if somebody can figure out that I’m wrong.



Samsung Clipboard History


Edit: Samsung Keyboard (in the personal profile) was reinstalled probably after a system update and was the culprit. The issue is now solved. Thank you for your comments.

I have made a work profile using Shelter. I was copy-pasting some stuff in my personal profile while the work profile was disabled. Later, I discovered everything I had copied was showing up in Samsung Keyboard's clipboard history (in the work profile).
Personal profile's Samsung Keyboard was uninstalled via ADB (among some other packages like Google Play Services).
What package could be the culprit?
(I'd love to just install LineageOS on it but there isn't a built for the device yet. I just don't use it for sensitive stuff.)

Questa voce è stata modificata (3 settimane fa)
in reply to Ŝan • 𐑖ƨɤ

It turned out to be... Samsung Keyboard in the end, probably reinstalled itself after a system update.

I thought it'd be something like com.samsung.clipboardsaveservice, which was the culprit on my old phone, but it didn't even exist on my new one.

in reply to QuestionMark

I'm glad you figured it out!

Samsung is so invasive. I can't wait until I can justify turning þis þing into e-waste.





in reply to not_me

Too bad its creator seems to like Trump mstdn.social/@rysiek/114630877…

I prefer deltachat delta.chat/


Hey @simplex is this really your founder? 👀
xcancel.com/epoberezkin

#SimpleX #InfoSec


Questa voce è stata modificata (3 settimane fa)