Digital Omnibus on AI

Overview

The Regulation on the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI) represents a pivotal legislative initiative by the European Union, designed to streamline and enhance the practical application of the landmark AI Act (Regulation (EU) 2024/1689). Proposed by the European Commission on November 19, 2025, as part of a broader Digital Simplification Package, this regulation aims to reduce the administrative burden on businesses, particularly small and medium-sized enterprises (SMEs) and small mid-cap companies (SMCs), while upholding the high standards for safety, fundamental rights, and ethical considerations established by the original AI Act. The initiative stems from a recognition that while the AI Act sets a global benchmark for AI regulation, its comprehensive nature could present implementation challenges, potentially hindering innovation and competitiveness within the EU market.

This Digital Omnibus on AI seeks to address identified challenges in the timely application and operationalisation of the AI Act, particularly concerning the designation of national competent authorities, the publication of harmonised standards, and the availability of compliance tools for high-risk AI requirements. Key objectives include fostering an innovation-friendly environment, ensuring legal certainty, and promoting a more harmonised implementation of AI rules across Member States. The regulation also introduces targeted amendments to facilitate the use of AI regulatory sandboxes, clarify governance structures, and adjust application timelines for certain high-risk AI systems to align with the readiness of supporting infrastructure and standards. Furthermore, it reinforces protections for citizens by prohibiting certain ethically problematic AI systems, such as those generating non-consensual explicit content. The political agreement on this regulation was reached on May 7, 2026, and it received the final green light from the Council on June 29, 2026, marking its adoption.

Definitions

For the purposes of this Regulation, several key terms are either explicitly defined or implicitly understood in the context of the overarching AI Act. A 'High-risk AI system' refers to AI systems identified under the AI Act as posing significant risks to health, safety, or fundamental rights, necessitating stringent requirements and conformity assessments. This category includes AI used in critical infrastructure, education, employment, and law enforcement, among others. The Digital Omnibus aims to simplify the compliance pathways for these systems, particularly for smaller entities, without compromising the inherent safety and ethical safeguards. The concept of 'Regulatory Sandboxes' is central to the innovation support mechanisms, denoting controlled environments where AI systems can be developed and tested under regulatory supervision, allowing innovators to iterate and refine their solutions in a real-world setting while ensuring compliance with evolving legal frameworks. The Regulation expands the scope and accessibility of these sandboxes, including the establishment of an EU-level sandbox.

The 'AI Office,' established within the European Commission, plays a crucial role as the central body responsible for overseeing the implementation and enforcement of the AI Act. Its powers are reinforced by this Digital Omnibus, particularly in supporting the oversight of AI systems built on general-purpose models and those embedded in very large online platforms. The regulation also extends specific considerations to 'SMEs and SMCs' (Small and Medium-sized Enterprises and Small Mid-Cap Companies), acknowledging their unique challenges in navigating complex regulatory landscapes. This includes simplified technical documentation requirements and proportionate monitoring activities and penalties. 'General-purpose AI models (GPAI)' are also addressed, with the regulation clarifying governance and oversight mechanisms for these foundational technologies that can be adapted for a multitude of tasks. The amendments ensure that the regulatory framework remains agile enough to address rapidly evolving AI technologies and their diverse applications, promoting both innovation and responsible deployment across the single market.

Governance and Institutional Framework

The Digital Omnibus on AI significantly refines and strengthens the governance and institutional framework established by the original AI Act, primarily by clarifying roles and enhancing coordination among various bodies. A central element of this framework is the European AI Office, whose enforcement powers are reinforced to centralise oversight of certain AI systems, including those built on general-purpose models and those integrated into very large online platforms and search engines. This centralisation aims to reduce governance fragmentation and ensure a consistent application of rules across the EU, addressing concerns about potential inconsistencies arising from multi-level governance where EU-wide rules are enforced by national authorities. The regulation also mandates Member States to strengthen cross-border cooperation among their national regulatory sandboxes, further fostering a cohesive European approach to AI innovation and regulation.

The regulation also addresses the practical challenges faced by national competent authorities in implementing the AI Act, particularly regarding the designation of these authorities and the timely publication of harmonised standards. By streamlining processes and providing clearer guidance, the Digital Omnibus facilitates the effective functioning of these national bodies, enabling them to better support businesses in compliance. Furthermore, the regulation extends certain simplified requirements and considerations, initially granted to SMEs, to SMCs, ensuring that monitoring activities and any penalties imposed by competent authorities remain proportionate to the size and capacity of these businesses. This strategic adjustment aims to alleviate administrative burdens and encourage innovation among a broader spectrum of European companies, aligning regulatory oversight with the economic realities of diverse market actors while maintaining robust protection for health, safety, and fundamental rights.

Key Focus Areas

The Digital Omnibus on AI zeroes in on several critical areas to achieve its overarching goal of simplification and enhanced implementation of the AI Act. A primary focus is the reduction of administrative burdens for businesses, particularly for SMEs and SMCs. This includes introducing binding definitions for these entities in the AI Act and permitting them to submit certain elements of technical documentation in a simplified manner, with the Commission committed to providing a simplified technical documentation form. These measures are designed to save businesses significant administrative costs and encourage broader participation in the AI market by making compliance more accessible for smaller innovators. The regulation acknowledges that the original AI Act's scope and technical requirements presented challenges for these companies, and the omnibus seeks to provide practical relief.

Another significant area of focus is the expansion and optimisation of AI regulatory sandboxes. The provisions on AI regulatory sandboxes in the AI Act are amended to create a legal basis for the AI Office to introduce an EU-level AI regulatory sandbox for certain AI systems under its exclusive supervisory competence. This expansion aims to give more innovators access to environments where they can test their AI solutions in real-world conditions, fostering innovation while ensuring regulatory compliance. Furthermore, the Digital Omnibus addresses specific ethical concerns by prohibiting AI systems that generate non-consensual sexually explicit and intimate content or child sexual abuse material, such as AI 'nudification' apps, thereby strengthening protection for citizens. The regulation also clarifies the interplay between the AI Act and existing EU product safety laws, like the Machinery Regulation, to avoid duplication and ensure coherence across the regulatory landscape.

Implementation Framework

The implementation framework outlined in the Digital Omnibus on AI is designed to ensure a smoother, more coherent, and innovation-friendly application of the harmonised rules on artificial intelligence across the European Union. A key aspect of this framework is the adjustment of application timelines for certain high-risk AI systems, linking their entry into application to the availability of essential support tools, including necessary technical standards. This strategic sequencing is crucial to ensure that businesses have the required technical standards and other support mechanisms in place before the rules become fully applicable, thereby mitigating potential delays and compliance costs. For instance, rules for systems used in certain high-risk areas like biometrics, critical infrastructure, education, employment, migration, asylum, and border control will apply from December 2, 2027, while rules for systems integrated into products like lifts or toys will apply from August 2, 2028.

Moreover, the Digital Omnibus facilitates the practical operationalisation of the AI Act by providing clearer guidance and targeted amendments to existing provisions. It aims to address challenges identified in integrating AI governance with existing data governance frameworks and embedding risk management throughout the entire AI lifecycle. The Commission is committed to issuing a series of guidelines to optimise compliance with the AI Act, complementing the legislative changes introduced by the Omnibus. The regulation also seeks to ensure that national authorities give special attention to SMEs and SMCs, ensuring that monitoring activities and any penalties and fines imposed remain proportionate. This comprehensive approach to the implementation framework seeks to strike a balance between robust regulation and the promotion of innovation, ensuring that Europe remains a leader in trustworthy AI development and deployment.

Monitoring and Evaluation

The Digital Omnibus on AI, while primarily focused on simplifying the implementation of existing rules, inherently establishes a framework for ongoing monitoring and evaluation of the AI Act's effectiveness and the impact of the introduced simplifications. The reinforcement of the AI Office's powers and its central role in overseeing certain AI systems, including those built on general-purpose models, positions it as a key institution for continuous monitoring of market developments and compliance trends. This centralised oversight will enable the Commission to gather comprehensive data on the deployment and performance of AI systems across the EU, facilitating a more informed assessment of the regulatory framework's practical effects and identifying any emerging challenges or areas requiring further adjustment. The requirement for Member States to strengthen cross-border cooperation of their regulatory sandboxes also contributes to a broader monitoring ecosystem, allowing for the sharing of best practices and insights gained from real-world testing of AI solutions.

Furthermore, the Commission's commitment to issuing a series of guidelines aimed at optimising compliance with the AI Act, alongside the legislative amendments, indicates a dynamic approach to regulation that includes continuous evaluation of the regulatory landscape. These guidelines can be updated based on feedback from stakeholders and observations from market surveillance activities, ensuring the framework remains relevant and effective in a rapidly evolving technological environment. The explicit extension of simplified requirements to SMEs and SMCs, coupled with the directive for national and EU authorities to ensure proportionate monitoring and penalties, implies a continuous assessment of the regulatory burden on these critical economic actors. This ongoing evaluation will be vital to confirm that the simplification efforts are indeed reducing administrative costs and fostering innovation without compromising the fundamental objectives of the AI Act, thereby ensuring that the EU's AI strategy remains competitive and human-centric.

Penalties, Liability, and Appeals

While the Digital Omnibus on AI primarily focuses on streamlining and simplifying the implementation of the AI Act, it also implicitly reinforces the principles of proportionate enforcement, particularly concerning penalties and liability. The regulation explicitly states that national and EU authorities are to give special attention to SMEs and SMCs, ensuring that monitoring activities and any penalties and fines imposed remain proportionate. This provision is crucial for fostering an innovation-friendly environment, as it aims to prevent overly burdensome sanctions from stifling smaller entities that may have fewer resources to navigate complex compliance requirements. The underlying penalties and liability frameworks for non-compliance with the AI Act remain in effect, but the Omnibus seeks to ensure their application is fair and balanced, reflecting the size and capacity of the regulated entities. The objective is to maintain a high level of protection for health, safety, and fundamental rights while avoiding disproportionate impacts on businesses.

The clarification of governance structures and the reinforcement of the AI Office's powers, as introduced by the Omnibus, also contribute to a more transparent and predictable enforcement landscape. A clearer understanding of supervisory responsibilities and compliance pathways can indirectly reduce instances of non-compliance, thereby mitigating the need for penalties. Furthermore, by expanding access to regulatory sandboxes, the regulation provides a mechanism for innovators to test and validate their AI systems in a controlled environment, reducing the risk of non-compliance before market deployment. This proactive approach to compliance, supported by the simplification measures, aims to minimise the likelihood of breaches that would trigger penalties. While the Omnibus itself does not introduce new appeal mechanisms, the existing avenues for appealing regulatory decisions and penalties under EU law and national administrative procedures would continue to apply, ensuring due process for affected parties. The emphasis on clear, practical, and innovation-friendly implementation ultimately aims to create a regulatory environment where compliance is achievable, and enforcement is both effective and equitable.

Relationship to Other Instruments

The Regulation on the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI) is intrinsically linked to and directly amends the foundational EU AI Act (Regulation (EU) 2024/1689), which entered into force on August 1, 2024. Its primary purpose is to address implementation challenges and lighten the regulatory burden identified since the AI Act's entry into force, making its provisions more practical and innovation-friendly. Beyond the AI Act, the Digital Omnibus also introduces minor amendments to Regulation (EU) 2018/1139, which pertains to common rules in the field of civil aviation. These specific amendments aim to ensure the consistent application of the AI Act's high-risk requirements within the civil aviation sector, thereby maintaining coherence across different regulatory domains. This demonstrates the EU's commitment to ensuring that AI regulation is integrated seamlessly into existing sectoral legal frameworks.

Furthermore, the Digital Omnibus on AI is an integral part of a broader European Commission initiative known as the Digital Simplification Package, or the 'Digital Omnibus' package, published on November 19, 2025. This comprehensive package includes not only the AI-focused regulation but also another digital omnibus proposal aimed at simplifying and consolidating parts of the EU's digital acquis, making targeted amendments to data, privacy, and cybersecurity laws. The package also encompasses a Data Union Strategy to unlock high-quality data for AI and proposals for European Business Wallets, which aim to offer companies a single digital identity to simplify paperwork. This holistic approach underscores the EU's strategic vision to streamline its digital regulatory framework across various interconnected domains, aiming to boost competitiveness, cut red tape, and save billions for businesses by making compliance simpler, less costly, and more efficient.

International Alignment

While the Digital Omnibus on AI is an internal European Union legislative instrument, its implications for international alignment are significant, given the EU's pioneering role in comprehensive AI regulation. The original AI Act has been widely recognised as the world's first comprehensive legal framework on AI, setting a global benchmark for trustworthy and human-centric artificial intelligence. By simplifying and clarifying the implementation of this landmark regulation, the Digital Omnibus aims to enhance the EU's position as a leader in responsible AI governance, potentially influencing regulatory approaches in other jurisdictions. The objective of fostering an innovation-friendly environment within the EU, while maintaining high standards of protection, demonstrates a model that balances technological advancement with ethical considerations, a balance keenly observed by international partners and competitors alike.

The regulation's efforts to streamline compliance for businesses, including SMEs and SMCs, and to expand regulatory sandboxes, could make the EU market more attractive for international AI developers and deployers seeking regulatory clarity and support. This could, in turn, promote greater international cooperation and potentially facilitate mutual recognition of conformity assessments or regulatory approaches in the future. Conversely, concerns about regulatory fragmentation and inconsistency across jurisdictions have been highlighted as challenges in implementing horizontal AI regulation, particularly for companies operating across multiple sectors. By ensuring a more harmonised and practical implementation within the EU, the Digital Omnibus indirectly addresses these concerns by providing a clearer and more predictable domestic landscape, which can serve as a more stable foundation for international engagement and dialogue on AI governance. The EU's commitment to a clear, practical, and innovation-friendly implementation of its AI framework reinforces its ambition to shape global norms for AI development and deployment.

Implementation Timeline

Sources and References