EU Data Omnibus Position Raises Questions for AI and Client Data

1. What is happening?

EU member states have agreed their Council position on the Data Omnibus, according to a netzpolitik.org report. The package aims to simplify data use while changing parts of EU privacy practice.

The report says the Council would keep parts of the ePrivacy cookie framework but expand situations where consent is not required, including cookies needed for a service, audience measurement or device security. It also says AI training with personal data could become easier in some cases under the GDPR basis of “legitimate interest,” with a right to object.

This is policy news, not empirical research. The Council position is a negotiating mandate, not final law. The European Parliament still has to adopt its position before trilogue negotiations begin.

2. The Somatic & Systemic Context

For somatic coaches, bodyworkers, massage therapists, intimacy practitioners and movement or breath teachers, “data” is not abstract. It can include contact details, intake forms, session notes, health-related information, messages, browsing history, photos, videos or audio recordings.

The European Data Protection Board’s small-business guide describes core data protection principles such as lawfulness, transparency, purpose limitation, data minimisation, storage limitation and security. In plain English: collect only what you need, explain why you need it, keep it only as long as needed and protect it carefully.

The 2020 review on digital privacy in mental healthcare reports that digital tools such as email, texting, telehealth, electronic records, cloud storage, apps and digital assessments can improve access and efficiency. It also argues that these tools increase the risk of unintended confidentiality breaches, so informed consent, security awareness, encryption, de-identification where appropriate and careful review of third-party services matter.

The Data Omnibus debate brings that same tension into focus: easier digital use can support practical work, but it can also blur boundaries around client data sovereignty and digital well-being.

3. The Dual Perspective

What this means for daily life

As a client or seeker, you may share more with a practitioner than you realise: appointment messages, intake answers, personal context, payment details or notes about your body and stress. The question is not only “Is this practitioner kind?” but also “Where does my information go?”

You can ask clear, simple questions before sharing sensitive information digitally: what is collected, where it is stored, who can access it, how long it is kept and whether AI tools or third-party platforms are involved. Asking is not mistrust. It is part of informed consent.

What this means for your practice as a coach, facilitator or bodyworker

For practitioners, this is a timely moment to review digital systems before policy changes land. Look at website cookies, booking tools, newsletters, cloud folders, client messaging, intake forms and any AI tools used for drafting, organising or summarising.

If you use AI for admin, avoid putting identifiable client notes, messages or intake material into systems unless you have a lawful basis, clear consent where needed and a strong understanding of the tool’s data terms. Pseudonymisation means reducing identifiers so a person is harder to identify. Anonymisation means the person can no longer be identified. The Council position, as reported, would add guidance on these concepts, but guidance is not a substitute for professional legal advice.

Ethically, sensitive body-based work needs more than compliance. It needs plain-language consent, fewer data points where possible, secure habits and honest limits. If you are unsure about GDPR duties, get qualified legal or data protection support.

4. Key Takeaways

• The EU Council position on the Data Omnibus is a negotiating mandate, not final law.
• The proposal could make some AI training with personal data easier under “legitimate interest,” with a right to object.
• Practitioners can support client data sovereignty by minimising, securing and clearly explaining their digital data practices.

Sources & References:

1. Original News – netzpolitik.org report on the EU Data Omnibus Council position
2. Context – Data protection basics
3. Reference – Digital privacy in mental healthcare: current issues and recommendations for technology use

Recommended Video Resource: Data protection explained in three minutes
Why we recommend this: A short starting point for practitioners who want to refresh basic privacy concepts.

Further Reading on The Conscious Channel: For more on digital well-being, boundaries and technology in body-based work, visit our Tech & Digital Embodiment section.

This article summarizes published news and research for educational purposes. It is not medical, psychological or legal advice.

#DataOmnibus #ClientData #TechDigitalEmbodiment #DataPrivacy #DigitalEmbodiment #TechBoundaries