12.11.2025 16:56:00
Дата публикации
The European Commission has proposed major changes to the General Data Protection Regulation (GDPR), a law that since 2018 has been considered the global benchmark for data protection. The goal of the reform is to simplify regulators’ work and speed up complaint handling. Critics, however, argue that it could undermine users’ rights.
Austrian organization NOYB, founded by lawyer Max Schrems, warns that the reform threatens to dismantle GDPR’s fundamental principles. They believe the new rules would allow companies to ignore deletion requests, restrict access to information, and facilitate the use of personal data without consent.
One of the most controversial points is narrowing the definition of “personal data.” This could enable AI companies to use behavioral and biometric data without explicit permission, citing technical exceptions. Critics call it a loophole for mass surveillance.
The reform also proposes limiting the ability to file complaints in other EU countries. Currently, a user in France can complain about an Irish company to their national authority. The reform could close this option, concentrating oversight in the company’s country of registration.
According to Reuters, human rights advocates describe the reform as “GDPR’s death by a thousand cuts.” Instead of targeted improvements, it introduces a comprehensive overhaul that may weaken protections in favor of corporate efficiency.
The European Commission insists the changes aim to reduce bureaucracy and accelerate processes. In practice, however, this could mean large platforms face sanctions even less frequently.
GDPR was created as a response to growing digital surveillance and data leaks, rights groups note, and reforming it requires caution to avoid turning privacy protection into a mere formality — especially in the age of AI and pervasive personalization.
NOYB calls for broad public debate and transparency, stressing that such changes must involve not only corporations but also civil society, experts, and users. If adopted in its current form, the reform could mark a turning point: from protecting human rights to protecting platform interests.
Austrian organization NOYB, founded by lawyer Max Schrems, warns that the reform threatens to dismantle GDPR’s fundamental principles. They believe the new rules would allow companies to ignore deletion requests, restrict access to information, and facilitate the use of personal data without consent.
One of the most controversial points is narrowing the definition of “personal data.” This could enable AI companies to use behavioral and biometric data without explicit permission, citing technical exceptions. Critics call it a loophole for mass surveillance.
The reform also proposes limiting the ability to file complaints in other EU countries. Currently, a user in France can complain about an Irish company to their national authority. The reform could close this option, concentrating oversight in the company’s country of registration.
According to Reuters, human rights advocates describe the reform as “GDPR’s death by a thousand cuts.” Instead of targeted improvements, it introduces a comprehensive overhaul that may weaken protections in favor of corporate efficiency.
The European Commission insists the changes aim to reduce bureaucracy and accelerate processes. In practice, however, this could mean large platforms face sanctions even less frequently.
GDPR was created as a response to growing digital surveillance and data leaks, rights groups note, and reforming it requires caution to avoid turning privacy protection into a mere formality — especially in the age of AI and pervasive personalization.
NOYB calls for broad public debate and transparency, stressing that such changes must involve not only corporations but also civil society, experts, and users. If adopted in its current form, the reform could mark a turning point: from protecting human rights to protecting platform interests.
