A new investigation into the activities of Google, Meta and other technology companies has intensified scrutiny of EU plans to revise data-protection legislation, placing Ireland and Germany at the centre of a dispute over corporate influence and European digital sovereignty.

European technology policy has become the focus of a dispute over corporate lobbying after researchers documented extensive contacts between major technology companies and political decision-makers during negotiations to revise EU data-protection rules.

An investigation published on 28 October by Corporate Europe Observatory and the German transparency organisation LobbyControl alleges that leading technology companies mounted a coordinated campaign to influence European governments and legislators.

The findings come one week after EU member states agreed a negotiating position on the Digital Omnibus, a legislative package intended to simplify aspects of European data-protection, privacy and cybersecurity regulation.

The campaigners argue that the proposed changes risk weakening existing safeguards in order to accommodate the commercial requirements of artificial intelligence developers.

Ireland, which holds the rotating presidency of the Council of the European Union, has rejected suggestions that its handling of the legislation was improperly influenced by technology companies.

The dispute exposes a fundamental disagreement over the balance between commercial innovation and the protection of personal information.

The scale of the lobbying campaign

According to LobbyControl’s investigation, non-European technology companies recorded 103 meetings with representatives of Germany’s federal government between May 2025 and September 2026.

Google accounted for 28 meetings, Microsoft 18, Amazon 16 and OpenAI 11.

Germany’s Digital Minister, Karsten Wildberger, participated in 18 meetings with representatives of major technology companies, the researchers reported.

In Ireland, the organisations identified extensive engagement involving Meta, Google and politicians ahead of the country’s assumption of the EU Council presidency in July.

Their findings indicate that Meta engaged with 41 Irish parliamentarians over the Digital Omnibus, while Google recorded 30 meetings.

The researchers also identified 655 lobbying meetings concerning the legislation involving members of the European Parliament.

According to their analysis, approximately 83 per cent represented business interests, compared with 11 per cent involving civil society organisations or trade unions.

These figures demonstrate the intensity of corporate engagement, although the existence of lobbying meetings does not, by itself, establish that particular legislative provisions were adopted because of that activity.

Why the Digital Omnibus matters

The legislative package forms part of a broader European Commission initiative to reduce administrative burdens and improve competitiveness.

Its provisions address several areas of digital regulation, including the General Data Protection Regulation, commonly known as GDPR.

The proposals seek to simplify compliance obligations, clarify the treatment of personal information and revise rules governing certain forms of data processing.

One particularly contentious issue concerns the use of personal data in developing and operating artificial intelligence systems.

AI developers require large quantities of information to train and improve their models. However, the collection and processing of personal information remain subject to European legal safeguards.

Technology companies have argued that regulatory complexity can discourage investment and make it more difficult for European businesses to compete internationally.

Privacy campaigners maintain that simplifying regulatory procedures must not become a mechanism for reducing substantive protections.

The disagreement concerns not merely administrative paperwork but the legal circumstances under which companies may process information relating to identifiable individuals.

Ireland rejects allegations of improper influence

Ireland occupies a particularly sensitive position in the debate.

The country hosts major European operations of several American technology companies, including Google and Meta, and has substantial economic interests in the digital sector.

At the same time, its presidency of the EU Council requires it to coordinate negotiations between member states.

According to RTÉ’s reporting on the investigation, the Irish government strongly rejected the allegation that it had weakened data safeguards in response to corporate pressure.

A presidency spokesperson emphasised that Ireland’s responsibility was to facilitate agreement between member states and that the negotiating mandate approved on 21 October enjoyed broad support.

The Council has presented the proposed changes as a means of reducing compliance costs while preserving established privacy protections.

In its official statement, the Council said its mandate retains the existing definition of personal data and introduces additional provisions governing pseudonymisation.

It also includes safeguards relating to sensitive information used for biometric verification and AI systems.

These details are significant because they demonstrate that the negotiating text contains protections alongside proposed simplifications.

Germany’s role in the negotiations

Germany has also emerged as an important participant in the controversy.

The investigation points to close contact between the German government and international technology companies during discussions about the future of European digital regulation.

Berlin has supported reducing administrative restrictions that it considers obstacles to innovation and the development of competitive AI technologies.

For Germany, the issue is connected to wider concerns about industrial competitiveness, investment and Europe’s dependence on foreign technology suppliers.

Yet an unresolved question remains.

Measures designed to assist European innovators may also benefit established American companies whose extensive computing infrastructure and data resources give them advantages over smaller competitors.

Consequently, easing restrictions does not necessarily guarantee a stronger European technology industry.

The European Parliament holds the next decision

The Council’s negotiating position does not make the Digital Omnibus law.

The European Parliament must establish its own position before negotiations between the institutions can determine the final legislation.

Parliamentarians will therefore have an opportunity to examine the treatment of personal data, the safeguards attached to AI development and the relationship between regulatory simplification and individual rights.

The lobbying investigation is likely to become part of that debate.

Its central political significance lies in the competing interpretations of European technological sovereignty.

For governments seeking investment, regulatory flexibility may provide an instrument for improving Europe’s international competitiveness.

For privacy organisations, the same flexibility could increase the influence of companies already dominant in global digital markets.

The outcome will help determine whether Europe’s future digital framework preserves the existing balance between commercial data use and individual protections, or establishes a different relationship between the two.

Members of the European Parliament are visiting Amazon logistics centres in Germany and Poland this week to investigate working conditions and the use of digital monitoring systems, reopening a dispute between the technology company, European legislators and trade unions over employee rights.

The fact-finding mission, scheduled for 26th and 27th October, will examine how Amazon organises work, measures employee productivity and uses automated systems in warehouses. MEPs will meet management, employees, works councils and trade union representatives, with particular attention to whether technological changes are affecting workers’ health and their ability to exercise employment rights.

The investigation comes as the European Commission prepares its Quality Jobs Act, which is expected to address algorithmic management, occupational safety and working conditions across the European economy. Amazon’s extensive logistics network makes the company a prominent example of the questions legislators must resolve.

MEPs enter warehouses after prolonged dispute

The delegation is led by Li Andersson, chairwoman of Parliament’s Employment and Social Affairs Committee, and includes Belgian MEPs Liesbet Sommen and Estelle Ceulemans, alongside representatives from several other political groups.

According to the European trade union federation UNI Europa, MEPs will inspect facilities in Dortmund and Mönchengladbach on Monday before travelling to Poland on Tuesday.

The German visits will cover older warehouse operations and newer facilities incorporating robotics, allowing parliamentarians to compare different approaches to handling orders and managing employees. The Polish programme includes a major returns facility in the Katowice area.

The visit follows several years of strained relations between Amazon and the European Parliament.

In February 2024, Parliament withdrew permanent access badges from Amazon representatives following disagreements over the company’s participation in hearings and requests for visits to its warehouses.

Amazon disputed suggestions that it was avoiding scrutiny, maintaining that it had offered alternative arrangements for parliamentary visits during periods when its logistics operations were particularly busy.

Company executives eventually appeared before the Employment and Social Affairs Committee in January 2026, where they defended Amazon’s employment policies and workplace practices.

The controversy over digital surveillance

At the centre of the dispute is the increasingly widespread use of electronic systems to monitor productivity.

Warehouse employees commonly use handheld scanners, while automated systems can help allocate tasks, coordinate movements and identify delays in processing orders.

These technologies allow employers to manage substantial logistics operations with considerable precision. They also make it possible to collect detailed information about individual workers’ activities throughout their shifts.

Trade unions argue that such monitoring can create unreasonable performance pressure, particularly where targets are adjusted automatically or workers cannot challenge assessments generated by software.

The concerns are not confined to Amazon.

A European Commission survey examined by EU Today earlier this month found that 42 per cent of surveyed smaller and medium-sized businesses already used artificial intelligence or algorithmic management systems.

However, 49 per cent of respondents expressed distrust of automated systems making decisions about employees, illustrating the distinction between using technology to support management and delegating consequential decisions to algorithms.

Previous regulatory action

Amazon has already faced formal European regulatory scrutiny over workplace monitoring.

France’s data protection authority imposed a €32 million fine on Amazon France Logistique in December 2023, announcing the decision in January 2024. The regulator concluded that certain employee monitoring practices were excessively intrusive and breached data-protection requirements.

The investigation examined the collection and retention of detailed information from warehouse scanners, including productivity indicators and periods of inactivity.

Amazon rejected the regulator’s conclusions and subsequently appealed the decision. The penalty therefore needs to be distinguished from any final judicial determination of the dispute.

The case nevertheless demonstrates that workplace monitoring falls within existing European privacy legislation, independently of proposals for new employment rules.

EU Today has also reported on the application of European data-protection law to automated employment decisions, including the question of whether meaningful human review is available when software affects a person’s ability to work.

Amazon disputes allegations

Amazon maintains that its warehouse technology is intended to improve operational efficiency, safety and the reliability of deliveries.

In its January parliamentary testimony, the company defended its investment in employee training and insisted that workers have the right to join trade unions.

It also pointed to engagement with works councils and employee representative bodies across its European operations.

Trade unions contest the adequacy of those arrangements, particularly in Germany, where the ver.di union has repeatedly sought a collective agreement covering Amazon employees.

These competing positions will form part of the parliamentary delegation’s assessment.

Implications for EU employment legislation

The Commission’s Quality Jobs initiative addresses several questions raised by the Amazon dispute, including algorithmic management, psychosocial risks and the effectiveness of collective bargaining.

Legislators must determine how far employers should be required to disclose the operation of automated monitoring systems, how employees can contest decisions and what safeguards should apply when performance targets are generated by software.

Rules must also accommodate legitimate requirements for stock management, security and workplace safety.

The parliamentary visit will not itself establish whether Amazon has breached employment legislation. It is a fact-finding exercise intended to inform future policy discussions.

Its importance lies in giving legislators direct access to warehouse operations and employee accounts before deciding how European labour law should respond to increasingly automated workplaces.

The European Union has taken a significant step towards revising its digital regulatory framework after member states agreed proposals to amend the General Data Protection Regulation (GDPR), simplify cookie consent requirements and overhaul cybersecurity reporting obligations.

The Council of the European Union adopted its negotiating position on Wednesday, 21st October, clearing the way for negotiations with the European Parliament once MEPs establish their position.

The measures form part of the European Commission’s Digital Omnibus package, introduced in November 2025, and represent one of Brussels’ most substantial attempts to simplify the regulatory obligations imposed on businesses operating across the single market.

Changes to GDPR and personal data rules

The proposed reforms would modify several provisions of the GDPR, which has governed the processing of personal data across the EU since May 2018.

Rather than replacing the legislation, the Council wants to clarify existing obligations, particularly those concerning pseudonymised information, requests for access to personal data and the use of information in scientific research.

The agreed position retains the existing definition of personal data while introducing provisions intended to clarify when pseudonymised information can be linked to an identifiable individual.

Companies would also benefit from simplified procedures for handling manifestly unfounded or excessive data requests and from reduced information requirements in certain low-risk circumstances.

Another proposed change would extend the deadline for notifying authorities of personal data breaches, while establishing more consistent reporting templates across the EU.

For multinational companies, which currently navigate different interpretations of data protection obligations by national authorities, these provisions could reduce compliance costs and administrative duplication.

However, the changes have raised concerns among European privacy regulators.

In a joint opinion published in February, the European Data Protection Board and European Data Protection Supervisor warned that parts of the Commission’s original proposal could create legal uncertainty and undermine existing protections.

They were particularly concerned about proposals affecting the definition of personal data and the Commission’s potential role in determining when pseudonymised information falls outside GDPR requirements.

The Council’s decision to retain the existing definition addresses part of that debate, although the final legislative text remains subject to negotiations.

Fewer cookie banners for internet users

One of the most visible changes would affect the consent notices encountered by Europeans when visiting websites.

Under the Council’s proposal, additional categories of cookies and similar tracking technologies could be used without obtaining explicit consent, provided the relevant legal conditions are satisfied.

The proposed exemptions include technologies necessary to deliver a service, maintain device security or conduct audience measurement.

For website operators, publishers and online businesses, the changes could reduce the number of consent requests displayed to visitors and simplify technical compliance.

The current system has generated extensive legal disputes over whether consent is genuinely voluntary and whether tracking technologies collect information beyond what users have authorised.

EU Today has previously examined the enforcement of these obligations, including a Belgian court ruling concerning the legality of the advertising industry’s consent framework.

The latest proposal would not abolish consent requirements for commercial tracking or behavioural advertising. Technologies falling outside the permitted exemptions would remain subject to the applicable privacy rules.

Cybersecurity reporting and artificial intelligence

The package also addresses the growing number of reporting obligations imposed on European businesses under overlapping cybersecurity legislation.

The Commission originally proposed a single European reporting mechanism for certain data and cybersecurity incidents.

Member states have instead agreed to establish national entry points, supported by an EU-level information system and provisions for coordinating cross-border notifications.

The Council’s position would also clarify the legal grounds for certain uses of personal data in artificial intelligence systems and introduce safeguards for processing sensitive information in specified circumstances.

These provisions follow increasingly complicated disputes over the application of European privacy legislation to AI development and automated decision-making.

As EU Today reported in its coverage of a major GDPR enforcement case involving Uber, automated processing already presents substantial compliance risks for companies operating within the bloc.

Competitiveness drives regulatory reform

The Commission estimates that its wider digital simplification initiative could save European businesses up to €5 billion in administrative costs by 2029.

The initiative reflects pressure from European governments and business organisations to reduce the regulatory fragmentation that makes operating across multiple EU jurisdictions more expensive.

The Digital Omnibus is part of a broader legislative programme influenced by the competitiveness reports produced by former Italian prime ministers Enrico Letta and Mario Draghi.

Under the Council’s negotiating mandate, several existing data-related rules would also be consolidated, while provisions governing the protection of trade secrets would be strengthened.

The European Parliament must now determine its negotiating position before formal discussions between the institutions can begin. Until the legislation is agreed and adopted, existing GDPR, cookie consent and cybersecurity requirements remain in force.