EU Member States agree on Digital Omnibus negotiating position
On 21 October, the Council of the EU agreed its negotiating position on the Digital Omnibus, advancing efforts to simplify EU rules on data protection, cybersecurity reporting and data sharing. The Council's position includes further adjustments to the GDPR and Data Act, particularly concerning proportionality for organisations carrying out low-risk data processing and stronger protection of trade secrets. The initiative forms part of the EU's broader simplification agenda, aimed at reducing compliance costs while maintaining data protection and cybersecurity safeguards.
A key element of the Council's position is its preference for national entry points for cybersecurity incident reporting, rather than the centralised EU Single Entry Point initially proposed by the Commission. ENISA would retain a supporting and coordinating role, while the Commission would assess opportunities to harmonise reporting requirements across EU legislation, including DORA. The compromise also clarifies when pseudonymised data may no longer be considered personal data for certain recipients, raises the threshold for personal data breach notifications to high-risk cases and extends the reporting deadline to 96 hours. In addition, it provides for a review of GDPR obligations for smaller and low-risk organisations and strengthens safeguards for trade secrets under the Data Act.
The agreement marks an important step towards simplifying the EU's digital regulatory framework, although its practical impact will depend on the final legislation and its implementation. In particular, questions remain over how far the proposed changes will reduce compliance burdens for organisations processing large volumes of personal or sensitive data or subject to overlapping reporting requirements. The European Parliament must still establish its negotiating position before trilogue negotiations can begin.
What this means for CEE markets: For Central and Eastern European countries, the proposed changes could reduce administrative burdens for businesses and financial institutions particularly smaller organisations with limited compliance resources. The emphasis on national cybersecurity reporting systems would allow Member States to build on existing structures, although differences in implementation could create challenges for cross-border operators. Greater interoperability and consistency in reporting requirements will therefore be important to ensure that simplification delivers tangible benefits across the region without creating additional fragmentation.
EU reaches political agreement on securitisation reforms
On 21 October, the European Parliament and Council reached a provisional political agreement on the review of the EU Securitisation Framework, marking an important milestone under the Savings and Investments Union (SIU). The European Commission welcomed the agreement as a step towards delivering its One Europe, One Market agenda. The reforms aim to revitalise Europe's securitisation market by simplifying regulatory requirements, making capital requirements more sensitive to actual risks and facilitating investment and lending to businesses and households.
The agreement introduces a new category of resilient securitisations, strengthens the existing simple, transparent and standardised (STS) framework and increases securitisation investment limits for UCITS funds. It also simplifies reporting requirements for private securitisations and strengthens supervisory coordination, including EU-level oversight of independent STS verification entities. The agreement must still be formally adopted by both institutions before entering into force.
What this means for CEE markets: In a region where bank financing remains particularly important, a more accessible securitisation market could help banks diversify funding and expand lending capacity. The reforms could also create new investment opportunities for pension funds and other institutional investors. However, their impact will depend on market depth, investor demand and whether the revised framework encourages securitisation activity beyond Europe's largest financial centres.
EU sustainable investments exceed €1.2 trillion as green bond issuance accelerates
On 20 October, the European Commission published new data on sustainable investment across the EU, alongside the Platform on Sustainable Finance's second report on monitoring capital flows to sustainable investments. The findings show that companies have reported more than €1.2 trillion in EU Taxonomy-aligned investments (CapEx) since 2022, including €313 billion in 2025. Green lending by EU banks reached €1.23 trillion in 2024, representing a 36% annual increase. The European Green Bond Standard is also gaining traction, with approximately €60 billion issued since its application began in December 2024. These developments point to the growing mobilisation of capital towards sustainable economic activities, particularly in energy infrastructure and clean technologies.
What this means for CEE markets: For Central and Eastern Europe, where financing needs for energy infrastructure, industrial modernisation and decarbonisation remain substantial, the continued development of sustainable investment markets could create additional opportunities to attract long-term institutional capital. At the same time, the Commission's ongoing efforts to simplify the sustainable finance framework will be important in ensuring that reporting and regulatory requirements remain proportionate and support investment rather than create unnecessary complexity.
