EU Unveils ‘Digital Omnibus’ to Delay High-Risk AI Rules and Trim GDPR Cookie Pop-Ups

Europe’s regulatory pendulum is swinging again: just seven years after GDPR (2018) set a global benchmark for data protection—much like the 1995 Data-Protection Directive did in the dial-up era—the bloc is now emulating its 1985 Single European Act moment, when rules were pared back to spur competitiveness against the U.S. and Japan. The Omnibus reflects structural pressures: chronic under-investment in European deep-tech, a widening AI-patent gap with the U.S./China, and louder national calls (notably France & Germany) for growth-first policy. Historically, loosening guardrails to catch up technologically (e.g., the 1973 Basel deregulation that chased petro-dollar finance) has produced mixed results—sometimes catalysing innovation, sometimes eroding public trust that later demands even harsher correction. On a century scale, this pivot matters because it tests whether Europe can reconcile its rights-based legal tradition with the dynamics of a general-purpose technology like AI; the outcome could set the tone for the next cycle of global digital governance or, if it backfires, trigger the same kind of regulatory recoil that followed the 2008 financial crisis.