The discussion was broadcasted by Bayern2.
Professor Christiane Wendehorst, ELI Scientific Director, took part in a radio interview addressing the future of EU data protection law and the need for a risk-based reform of the General Data Protection Regulation (GDPR), a theme addressed in ELI's recently published Response to the European Commission's Public Consultation 'Simpler, Fairer, More Effective – Towards a Targeted Revision of EU Data Protection Law'.
During the interview, Prof Wendehorst highlighted that the GDPR, whose foundations date back to the 1980s and 1990s, no longer adequately reflect today's data-driven reality. She emphasised that while the regulation is overly burdensome for low-risk actors such as small businesses, associations, and local organisations, it is insufficiently strict for large digital corporations that generate significant data protection risks.
Reflecting ELI's position, Prof Wendehorst advocated a risk-based approach to data protection reform. This would involve stricter rules for high-risk data processing activities, while largely exempting low-risk actors from the GDPR’s complex requirements, with only basic data security obligations remaining.
The interview also addressed the European Commission's recent Digital Omnibus proposal and ongoing discussions on cookie consent rules. Prof Wendehorst welcomed the Commission’s intention to significantly reduce cookie banners, particularly by removing consent requirements for certain anonymised statistical and security-related cookies, while acknowledging that further refinements could reduce legal uncertainty.
Prof Wendehorst moted that discussions in Brussels show openness to reform, although comprehensive changes were not yet included in the Digital Omnibus. She expressed optimism that more far-reaching reforms could follow within the forthcoming European Data Union strategy and Digital Fitness Check.
