Interactive Advertising Bureau
26 March 2026

Getting the Digital Omnibus Right: Protecting Privacy with Simpler Rules

On 19th March, IAB Europe organised a roundtable discussion on the Digital Omnibus proposal, focusing on how to protect users’ privacy while ensuring simpler and more effective rules for businesses. The discussion brought together EU policymakers and industry representatives to exchange views on the proposed reforms to cookie rules (Article 88a) and the introduction of centralised consent mechanisms (Article 88b).

The first session focused on the proposed reform of cookie rules under Article 88a. Participants welcomed the proposal’s aim to reduce consent fatigue and simplify rules for business, but argued that the current proposal falls short of that and instead introduces legal uncertainty and complexity.

The second session examined the concept of centralised consent under Article 88b and its potential implications. Participants discussed whether centralised consent tools could effectively reduce consent fatigue, while also raising concerns about their legal, technical, and economic feasibility. 

The discussion concluded with a recognition that the proposal is still in its early stages, and that further work is needed to ensure that the Digital Omnibus delivers on its objective of simplification without unintended consequences. Participants called for continued dialogue to explore workable solutions and a better understanding of the practical implications of proposed measures. 

The roundtable featured interventions from Valda Beizitere, Policy and Legal Officer in the Data Protection Unit at DG JUST; Mads Vigsø Bendsen, Tech and Media Attaché at the Permanent Representation of Denmark to the EU; Francesco Bondi, Manager for EU Government Relations at eBay; and Jacob Dexe, Public Affairs Manager at IAB Sweden and Chair of the IAB Europe Policy Committee. Both sessions were expertly moderated by Lorelien Hoet, Director of EU Government Affairs, Microsoft. 

IAB Europe’s key takeaways from the event include:

  • Simplification is the goal, but the current proposal falls short of that: There’s broad support for reducing consent fatigue and simplifying cookie rules, but risks arise from adding complexity without addressing root causes, particularly around the over-reliance on consent.
  • Centralised consent raises major market concerns: While intended to streamline user experience, centralised consent cannot satisfy the GDPR’s strict requirements for consent to be "specific" and "informed”. In addition, it poses competition concerns and a severe economic risk to ad-funded services as consent levels are likely to drop.
  • A more risk-based, balanced approach is needed: Broader exemptions and a risk-based framework will make consent more meaningful for users and workable for businesses, as well as incentivise privacy-first business models. 

Access IAB Europe’s position paper on the Digital Omnibus here

Our Latest Posts

Sign up for our newsletter
linkedin facebook pinterest youtube rss twitter instagram facebook-blank rss-blank linkedin-blank pinterest youtube twitter instagram