What happened
The European Commission’s Digital Omnibus proposal would restrict the GDPR right of access to “data protection purposes”, citing alleged abuse. NOYB’s analysis shows that 83.5% of access requests were not properly answered, with only 16.5% receiving a satisfactory reply. The proposal is still under discussion in the European Parliament and the Council.
Why it matters for trust and compliance
- Its status is proposed. It is not law yet. Track it, but do not treat it as an obligation.
- Limiting the right of access would further erode data subject protections despite widespread non‑compliance by companies.
- It relates to GDPR. The regulations library explains what that law requires.
Who is affected
technology advertising controller processor TikTok AliExpress WeChat Xandr Xandr (Microsoft subsidiary) European Commission
Recommended actions
- Check that privacy notices describe the practices this addresses.
- Confirm access, correction, deletion and opt-out requests are handled within the required time.