EU Council Proposes AI Act Delays and GDPR Legitimate Interest
Is this a scandal?
Not yet — an early signal. Noise 35/100, holding steady, across 1 source.
The European Parliament will likely push back against the legitimate interest expansion during trilogue negotiations because civil society groups argue it undermines fundamental GDPR consent principles.
Noise 35/100 — louder than 99% of tracked AI controversies.
Why it matters
Redefining pseudonymized data and permitting legitimate interest could fundamentally reshape EU AI development by lowering compliance barriers for model training.
Key points
- EU Council proposes delaying major high-risk AI Act obligations until 2027-2028.
- Amendments would explicitly allow AI development relying on legitimate interest without consent.
- Pseudonymized data definition becomes contextual based on recipient's identification capability.
- Council rejected making browser-level consent signals binding, retaining cookie popup requirements.
- Proposed changes aim to reduce compliance friction for European AI model training.
The story
The EU Council has proposed significant amendments to the AI Act, GDPR, and ePrivacy regulations that would delay high-risk AI obligations until 2027-2028 and explicitly permit AI development under legitimate interest without user consent. The proposal introduces a contextual definition of pseudonymized data, stipulating that datasets may fall outside GDPR scope for recipients unable to identify individuals while remaining regulated for others. Additionally, the Council rejected the Commission’s plan to make browser-level consent signals legally binding, ensuring cookie consent popups remain mandatory. These changes aim to balance innovation with privacy but face scrutiny from advocates concerned about weakened data protections. The proposals represent a major shift in how European regulators approach the intersection of artificial intelligence development and existing privacy frameworks.
Who's involved
Characterizes the Council's proposals as extreme changes that undermine established privacy protections.
Proposes regulatory adjustments to facilitate AI innovation while maintaining contextual privacy safeguards.
Originally proposed reducing banner spam through binding browser signals, which the Council subsequently removed.
Noise Level
The timeline
Council rejects browser-level consent binding
The EU Council text formally removes the Commission's provision making device-level consent signals legally binding.
Olejnik highlights EU Council proposal details
Privacy researcher Lukasz Olejnik publicly outlined specific Council amendments regarding AI Act delays and GDPR legitimate interest provisions.
The full record
Sources & methodology
- twitter.com — twitter.com
Every claim above traces to these primary items. How we score →
The forecast
The European Parliament will likely push back against the legitimate interest expansion during trilogue negotiations because civil society groups argue it undermines fundamental GDPR consent principles.
Forecast, not fact — an editorial estimate we score when this resolves.
That's the complete picture as of — nothing more to know right now. We'll update this page the moment it changes.
Follow this story
We keep this page current — no need to check back. We'll send the next real change to your inbox, nothing else.
Tracking this story since September 21, 2026.
Join the Discussion
Discuss this story
Community comments coming in a future update
Be the first to share your perspective. Subscribe to comment.