The EU wants cookie consent banners to appear less frequently while browsing the internet with certain activities no longer requiring consent. — Photo: Lino Mirgeler/dpa
BRUSSELS: "We value your privacy." Millions in the European Union have come to accept the online headache of banners that block content until you accept or decline cookies.
Now, in an attempt to cut red tape and simplify the experience of browsing the web, EU lawmakers want to significantly change the bloc's digital laws, considered among the world's strictest for data privacy.
With the changes, the European Commission says it aims to respond to calls from both member states and businesses to reduce bureaucracy. However, consumer protection advocates warn that data privacy for anyone inside the EU could be at risk from companies and foreign actors.
Which rules are set to change?
The changes will centre on the General Data Protection Regulation (GDPR), in force since 2018, which requires online shops and digital platforms to obtain consent before processing personal data.
The GDPR is also the source of unpopular cookie prompts that appear when visiting websites. Web cookies are small data files created by a web server while a user is browsing a website and stored on the user's device.
Under the plans, cookie consent banners should appear less frequently while browsing the internet with certain activities no longer requiring consent.
"The amendments will reduce the number of times cookie banners pop up and allow users to indicate their consent with one click and save their cookie preferences through central settings of preferences in browsers and operating system," the Commission said in a release.
The proposals presented on Wednesday also include changes to regulations on the handling of non-personal data and in the area of cybersecurity.
Other rules on non-personal data could be streamlined, including the EU Data Act, designed to give consumers more rights over data collected by connected devices such as smart TVs.
Parallel directives and acts exist too, for example on data management in public administration or health care.
The EU’s AI Act is also set to be affected. It lays out extensive obligations for systems such as ChatGPT and Gemini, including during model training.
The European AI Office is due to start enforcing parts of the rules from August next year, though the industry has repeatedly asked for more time to adapt.
Why is the Commission changing the law?
The planned simplifications form part of so-called omnibus efforts to cut red tape after companies and member states have made repeated calls for less bureaucracy.
Larger digital firms, such as TikTok and Facebook parent Meta, have in the past labelled EU rules contradictory and anti-competitive.
On Tuesday, German Chancellor Friedrich Merz and French President Emmanuel Macron also called for less stringent EU digital rules at a Franco-German digital summit in Berlin.
EU Commission Vice President Henna Virkkunen said at the summit that the aim was to streamline legislation while maintaining strict safeguards.
"By simplifying rules, reducing administrative burdens, and introducing more flexible and proportionate rules, we will continue delivering on our commitment to give EU businesses more space to innovate and grow," said EU Economy Commissioner Valdis Dombrovskis.
"Closing the innovation gap and cutting red tape are key drivers to boost the EU’s productivity," he said.
The proposals have, however, triggered criticism from data protection and consumer protection advocates.
What do critics and interest groups say?
Data and consumer advocates warned that loosening the rules could amount to caving in to the tech lobby. More than 120 organisations, including Amnesty International, cautioned the Commission in an open letter against weakening EU citizens’ rights, arguing the bloc’s digital rules are the key defence against exploitation and surveillance by domestic and foreign actors.
There is also criticism from the European Parliament. MEP Alexandra Geese commented: "Simplification yes – but not as a cloak for deregulation that deprives citizens of their rights." The Commission’s proposals require approval from EU member states as well as Parliament. – dpa
