The Fix
Make B2B data sharing voluntary by default
- Empower the Commission to recognise industry codes of conduct.
Digital Omnibus
CUT THE RED TAPE.UNLEASH EUROPE'SDIGITAL EDGE.
What is on the table does not do the job: Europe needs a simplified framework that protects trade secrets, streamline cyber reporting, and gives legal certainty to businesses building AI solutions
By the Numbers
The Cost of Complexity
Hard data from the European Commission, Draghi Report, and independent research reveals the staggering scale of regulatory burden on European industry.
EU Regulatory Burden
€500bn/yr
Overall annual regulatory compliance cost for EU business
Data Act
€235M/yr + €410M
Recurring and one-off Data Act compliance costs for manufacturers and developers
65 million jobs
Jobs in IP-intensive industries (47.9% of EU GDP) put at risk by mandatory data sharing
Cyber + GDPR
€60.2bn
Combined cost to industry of overlapping NIS2 and CRA cyber-incident reporting
$1.6bn/yr
Fall in US-to-EU venture capital flows attributed to the GDPR
The burden is European - but the cost is national
Hover any EU country to see estimates of the Data Act and cybersecurity compliance burden
Indicative estimates based on EU-wide cost baselines and GDP share.
Our Three Asks
Three fixes — one Omnibus
These costs aren't abstract: they push investment, talent and innovation out of Europe, without delivering proportionate protection. Three fixes would lift the burden, without lowering standards.
The Fix
A single EU cyber-incident reporting platform
- Covering all relevant legislation, with harmonised timelines, definitions and thresholds.
The Fix
Legal certainty for AI and research under the GDPR
- Confirm that companies with 'legitimate interest' can use data to train AI; Set one clear definition of "scientific research".
The Coalition
European Associations Call on the Council: Take the Time, Get It Right
0Signatory organisations
0National associations
0EU-level associations
Europe's digital and industrial sectors are speaking with one voice: don't rush the Digital Omnibus, use the time to deliver real simplification. That means rules that boost data-driven innovation, resolve the uncertainty around AI training and data protection, and harmonise cybersecurity reporting.
Read the Full Letter (PDF)