German and EU Civil Society Warn Against Weakened AI Surveillance and Safety Rules
Civil society groups in Germany, including Amnesty International and the Chaos Computer Club, urged the government to withdraw draft laws that would expand digital policing powers through biometric internet searches and automated analysis of large police datasets using systems such as Palantir. Critics said the proposals from the justice and interior ministries lack judicial oversight, transparency, documentation requirements, and clear limits on data scope and analytical methods, creating risks of mass surveillance, discriminatory profiling, and intrusive scrutiny of victims, witnesses, and uninvolved people. Germany’s independent data protection authorities also concluded that the measures, as drafted, are incompatible with constitutional requirements and could effectively sidestep the EU AI Act’s ban on mass facial-image processing into biometric databases.
At the EU level, a coalition led by BEUC and 31 other organizations warned that the proposed AI Omnibus could dilute safeguards by exempting sectors such as medical devices, radio equipment, toys, and machinery from the AI regulation’s direct scope. The groups argued that existing sector-specific product rules do not address AI-specific harms including discrimination, opacity, and the evolving behavior of AI systems, and said the change would create regulatory gaps, fragmentation, and legal uncertainty rather than simplification. They warned that weakening the framework would undermine consumer protection, fundamental rights, and trust in European AI governance as trilogue negotiations continue.
Timeline
Apr 20, 2026
Germany publishes 2025 police crime statistics
Germany’s 2025 police crime statistics showed a 5.6 percent year-over-year decline in recorded crime, with violent crime also down and sexual offenses up. BKA President Holger Münch said crime was becoming more digital and international, while Interior Minister Alexander Dobrindt used the figures to argue for tougher measures including expanded police powers such as automated data analysis and biometric internet searches.
Apr 8, 2026
Coalition warns against weakening EU AI rules in trilogue
A coalition led by BEUC and 31 other organizations warned that proposed simplifications in the AI Omnibus negotiations could dilute protections for consumers and fundamental rights. The groups argued that exempting sectors such as medical devices, toys, machinery, and radio equipment would leave AI-specific risks insufficiently regulated.
Apr 2, 2026
Civil society urges Germany to withdraw AI surveillance plans
Amnesty International, the Chaos Computer Club, and other civil society groups warned that draft laws from the Justice and Interior ministries would violate fundamental rights and should be withdrawn entirely. They said the proposals would enable mass surveillance, discriminatory profiling, and insufficiently supervised biometric and AI-driven policing.
Apr 2, 2026
Germany's data protection authorities reject AI policing drafts
Germany’s independent data protection authorities concluded that proposed federal powers for biometric internet searches and AI analysis of police datasets were incompatible with constitutional requirements and seriously endangered the rights of uninvolved people.
Mar 1, 2026
EU member states and Parliament adopt AI Omnibus positions
EU member states and the European Parliament adopted their negotiating positions on the AI Omnibus in March, advancing trilogue talks on possible changes to the AI regulation. One discussed proposal would exempt several product sectors from the regulation’s direct scope.
Nov 1, 2025
European Commission presents the AI Omnibus proposal
The European Commission presented the AI Omnibus package, starting the legislative process for proposed simplifications to EU AI rules. Later criticism focused on concerns that the package could weaken protections and create regulatory gaps.
See the full picture in Mallory
Mallory subscribers get deeper analysis on every story, including:
Who’s affected and how
Deep-dive technical analysis
Actionable next steps for your team
IPs, domains, hashes, and more
Ask questions and take action on every story
Filter by topic, classification, timeframe
Get matching stories delivered automatically
Related Entities
Sources
Related Stories
European Commission Proposes Deregulatory Changes to GDPR and AI Regulations
The European Commission has introduced a legislative package, known as the Digital Omnibus, aimed at simplifying and consolidating digital regulations across the European Union. This proposal seeks to merge multiple pieces of legislation into a single framework, streamlining rules on artificial intelligence, cybersecurity, and data management. A key component of the package is the relaxation of certain General Data Protection Regulation (GDPR) provisions, including delaying the enforcement of regulations on high-risk AI systems and permitting companies to use personal data for AI training without prior user consent in most cases. The initiative also includes the launch of a European Business Wallet to facilitate digital operations for companies and public sector bodies, and a new Data Union Strategy to unlock high-quality data for AI development. EU officials argue that these changes will reduce administrative burdens and compliance costs for businesses, fostering innovation and competitiveness within the bloc. However, the proposal has drawn criticism from privacy and digital rights advocates, as well as some political parties, who warn that it could significantly weaken data privacy protections that have been a hallmark of the EU's regulatory landscape. The legislative package must still be approved by the European Parliament and the Council of the European Union, and its future remains uncertain amid ongoing debate over the balance between innovation and fundamental rights.
1 months ago
Civil Society and Industry Opposition to EU Digital Omnibus and Encryption Backdoor Proposals
A coalition of 127 civil society organizations and trade unions has voiced strong opposition to the European Union's proposed Digital Omnibus changes, warning that these reforms could significantly weaken existing data protection and privacy laws such as the GDPR. The proposed legislation is criticized for potentially reducing safeguards on personal data, including genetic and biometric information, and for making it easier to use such data in AI training and online tracking. The coalition also expressed concern over the lack of transparency and democratic oversight in the legislative process, urging the European Commission to maintain robust digital rights protections. In parallel, more than 60 digital commerce and trade groups have called on governments worldwide to reject any efforts to weaken or bypass encryption, emphasizing that strong encryption is essential for user privacy, secure data protection, and trust in digital interactions. These groups argue that introducing backdoors or technical mandates for lawful access would undermine security for all users, outweighing any potential benefits for law enforcement. The letter comes amid ongoing debates in Europe and elsewhere about mandating access to encrypted data for criminal and national security investigations.
1 months ago
EU Digital Omnibus Proposal to Weaken GDPR Protections for AI and Cookie Tracking
The European Commission is preparing to introduce the "Digital Omnibus" legislative package, which includes significant amendments to the General Data Protection Regulation (GDPR) and related digital privacy laws. Leaked drafts of the proposal reveal changes that privacy advocates argue would create major loopholes, particularly by relaxing rules on pseudonymized data and shifting cookie regulation from the ePrivacy Directive to the GDPR. Critics, including Max Schrems and privacy groups like Noyb, warn that these reforms would undermine existing privacy protections, making it easier for companies—especially large tech and advertising firms—to exploit personal data for commercial purposes. The proposed amendments would also allow broader processing of cookie-derived data under a "closed list of low-risk purposes" or other legal bases, moving away from the current strict opt-in requirements. Privacy experts contend that these changes could violate European Court of Justice rulings and the EU Charter of Fundamental Rights, representing the most significant attack on European privacy since the GDPR's inception. The official unveiling of the Digital Omnibus package is expected on November 19, 2025, and the reforms have sparked strong opposition from privacy advocates who believe the legislative process is being rushed and lacks proper oversight, potentially eroding the rights of EU citizens in favor of industry interests.
1 months ago