EU Council Nears GDPR Deal That Would Let Tracking IDs Escape Privacy Law

The EU Council is moving toward a common position on the Digital Omnibus, which would amend the GDPR. Article 25a would let pseudonymised data count as non-personal for companies lacking the re-identification key, while AI processing would get a presumption of legitimate interest. Over 127 groups and the EDPB oppose the package.

• Article 25a: pseudonymised IDs could be non-personal for firms without the re-ID key
• EU online ad market worth ~€59 billion runs on pseudonymous identifiers
• AI processing would get a legitimate-interest presumption without consent or objection rights
• EDPB: changes narrow the concept of personal data against EU court case law