As the ePrivacy Regulation moves into trilogue negotiations, the American Chamber of Commerce to the European Union (AmCham EU) calls on co-legislators to prioritise clarity and conistency in their negotiations; laying out top-level recommendations on scope and alignment with GDPR; permitted processing of data; and privacy settings. Further review of these areas will ensure that the objectives of the regulation - to build trust and confidence in services for both consumers and businesses in digital services - are best achieved.
Clarity and consistency key for a strong ePrivacy Regulation
As the ePrivacy Regulation moves into trilogue negotiations, the American Chamber of Commerce to the European Union (AmCham EU) calls on co-legislators to prioritise clarity and conistency in their negotiations; laying out top-level recommendations on scope and alignment with GDPR; permitted processing of data; and privacy settings. Further review of these areas will ensure that the objectives of the regulation - to build trust and confidence in services for both consumers and businesses in digital services - are best achieved.

After four long years since the Commission’s proposal, the institutions' perseverance in bringing this important file to trilogues is comendable. However, in order to avoid limiting Europe’s data-driven economy we encourage negotiating parties to consider reviewing the areas of the draft regulation that we have touched upon in our paper ahead of forming trilogue compromise amendments.
Through this position paper, AmCham EU sets out three high-level points that can guide negotiators during trilogues to ensure Europe is able to continue to protect the confidentiality of communication while allowing for a competitive European data economy. Our first recommendation centres around the need to ensure the clarity of the scope of the regulation to align with the existing General Data Protection Regulation (GDPR) whilst adopting a risk-based approach to the text to ensure consistency between the two. Furthermore, the legal basis for processing of the ePrivacy Regulation must be closely aligned with those of the GDPR. Finally, including lawful bases in Article 8 to allow use of storage capabilities on-device for limited processing activities is welcomed, as well as the deletion of Article 10, provided this does not hinder introducing language that facilitates incentives for further development of privacy-preserving technologies (PPT).
Related items
:focal())
Brainy in Brittany
Along with beautiful scenery and delicious cuisine, Brittany is a hub for cutting-edge innovation, thanks to strategic investments in research and technology. InterDigital established its largest research centre in Rennes in 2019, employing local engineers to develop next-generation video, wireless and artificial intelligence technologies. The company partners with the French Research Institute for Computer Science and Automation and the University of Rennes 1, fostering collaboration with researchers and students. In 2025, InterDigital was awarded ‘Produit en Bretagne’ accreditation, recognising its regional impact. Learn how InterDigital is investing in European innovation and talent through its state-of-the-art Rennes facility on Invested in Europe.
:focal())
Digital Economy Conference 2025: in review
AmCham EU’s 2025 Digital Economy Conference took place on Thursday, 20 November with the theme ‘A transatlantic agenda for growth, innovation and simplification’. The event brought together policymakers, regulators and industry leaders to explore how Europe and the US can align efforts to promote responsible innovation, resilient infrastructure and forward-looking regulation in a rapidly evolving digital landscape.
Malte Lohan, CEO, AmCham EU, opened the conference with remarks highlighting the importance of strong transatlantic partnership to shape digital policy in an increasingly complex global environment.
:focal())
Digital Omnibus: a strong first step, but more room for harmonisation
The European Commission’s newly introduced Digital Omnibus package is a good starting point for the EU’s digital simplification. Measures such as adjusting the timeline for the application of high-risk AI rules and a reinforced role for the European AI Office are tangible improvements that will give businesses more certainty about how and when they need to meet their compliance obligations. Similarly, the Commission’s launch of a Digital Fitness Check to stress test the digital rulebook and a Data Union Strategy to unlock high-quality data for AI development are important steps.
However, in certain areas the Commission’s proposal does not go far enough, especially in the harmonisation of cybersecurity obligations. A single entry point for incident reporting helps, but duplication and fragmentation persist across the Network and Information Security Systems Directive 2, the Cyber Resilience Act, the Digital Operational Resilience Act and the General Data Protection Regulation. To cut costs for businesses while raising cyber resilience, the Omnibus should also:
Harmonise taxonomies, thresholds and timelines
Expand the main establishment principle
Align certification and conformity assessments to avoid double audits
Lessons from other Omnibus initiatives underscore the need for the co-legislators to take swift action and ensure reliable political support behind the Commission’s competitiveness agenda. The stakes for the Digital Omnibus are Single Market-wide. Manufacturers, healthcare and life sciences, financial services, mobility, energy and retail all rely on digital technologies and all face unnecessary burdens from overlapping digital rules. Targeted simplification that reduces duplication and clarifies enforcement promises to accelerate AI adoption, bolster cyber resilience and free resources for investment and jobs across Europe.
For more detailed recommendations, read our Digital Omnibus position paper.
Policy priorities
Insights and advocacy driving Europe’s policy agenda. Our priorities support growth, innovation and a stronger transatlantic economy.
Membership
Connecting business and policymakers to strengthen the voice of American companies in Europe.