AI Omnibus Adopted: EU aims to simplify and Streamline the AI rulebook

Welcome to #SypherPrivacyTalks - your data protection, governance and compliance weekly roundup. Bringing you the top stories of the week.

EU Council gives final approval to AI Act simplification under Omnibus VII

consilium.europa.eu • 4 min read

📜 High‑risk obligations have been delayed until 2027–2028 (stand‑alone systems are now due on 2 December 2027, and embedded systems on 2 August 2028). This December, the EU will ban AI‑generated sexual deepfakes and non‑consensual sexual and intimate content or child sexual abuse (CSAM). The package will also introduce two regulations to simplify the EU’s digital legislative framework and harmonised AI rules… read more

👉 Related: EU AI Act: AI Omnibus formally adopted (overview of the key points)

Technology Report 2026 – cybersecurity: the biggest business risk

lexology.com • 6 min read

🛡️ Irish businesses now view cybersecurity as their biggest technology risk, with AI‑driven threats outpacing defensive maturity and new EU rules such as NIS 2 and DORA hardening legal obligations; emerging frontier‑model capabilities like Anthropic’s Mythos further heighten concern, while the EU’s Digital Omnibus offers fixed timelines and greater regulatory certainty for planning… read more

U.S. Supreme Court decision prompts new questions about EU‑U.S. data transfers

shumaker.com/insight • 5 min read

🌎 The EU‑U.S. Data Privacy Framework (DPF) remains fully valid despite new legal debate following Trump v. Slaughter, with privacy advocates questioning the Federal Trade Commission’s independence but no regulator instructing organisations to stop relying on the DPF… read more

Ireland | A record‑breaking year: the Data Protection Commission’s Annual Report 2025

williamfry.com/knowledge • 7 min read

📝 Ireland DPC’s 2025 report shows a sharp rise in regulatory pressure: complaints up 45%, access requests still the dominant risk area, AI‑generated submissions adding complexity, and over €530 million in fines issued… read more

Slaughter and May – Issue 31 newsletter: Legal, case law updates, regulator guidance

slaughterandmay.com • 20+ min read

💡 The latest EU and UK developments show regulators intensifying their focus on children’s privacy, AI‑driven cyber risks and abusive DSAR patterns, with the ICO issuing new guidance, and the EDPB releasing DPIA and breach‑notification templates to streamline GDPR compliance… read more

--

Get connected with us on LinkedIn or by subscribing to our weekly newsletter. We do our best to select the most interesting and relevant content in our field and deliver it to you in a bite-sized format, so you can stay up to date on topics such as Privacy Management & Compliance.