The EU Council agreed its position on simplifying data protection, privacy and cyber reporting rules. The changes aim to make the EU’s digital rulebook clearer for businesses, public administrations and citizens. The proposal is part of the Omnibus VII legislative package under the EU’s simplification agenda. It includes amendments to GDPR, modernised cookie rules and a single reporting point for cyber incidents. GDPR changes clarify pseudonymisation, scientific research exemptions and AI-related data processing safeguards. Cookie consent rules are updated to reduce banners for certain purposes. A national entry point in each member state will handle incident reporting. The mandate also consolidates data acquis rules and strengthens trade secret protections.