Blog · arXiv Analysis · Last reviewed June 25, 2026

The AI Act Omnibus Becomes the Legitimacy Test

The June 2026 arXiv paper The Digital Omnibus on AI, Legislative Legitimacy and the Dynamics of AI Regulation, by Donal Casey and Liane Colonna, treats the EU Digital Omnibus on AI as more than a technical simplification package. It asks how a rights-based AI law keeps legitimacy while being amended before its core systems are fully built.

The Law Meets Its Update Loop

The paper, arXiv:2606.15662 [cs.CY], was submitted on June 14, 2026. Its object is the European Union's Digital Omnibus on AI, a 2025 Commission proposal to simplify implementation of parts of the AI Act. The Commission's proposal page says the package was published on November 19, 2025 and framed as targeted simplification for timely, smooth, and proportionate implementation of certain AI Act provisions.

The timing is the point. Regulation (EU) 2024/1689, the AI Act, was signed in June 2024, published in July 2024, and Article 113 gives it a staggered application schedule. Casey and Colonna emphasize that the Omnibus seeks to amend a central EU AI law while standards, guidance, institutional capacity, and compliance practices are still being assembled.

This makes the paper a useful companion to the site's work on the EU AI Act, AI governance, and AI regulatory sandboxes. The fresh angle is legitimacy under regulatory churn: not whether AI should be regulated, but how a law keeps authority while being revised before it fully matures.

What the Paper Argues

Casey and Colonna examine the Omnibus through legislative legitimacy. They draw on a framework with five rationalities: political, legal, cultural, operational, and internal. A law needs more than formal enactment; it also needs coherent legal design, public resonance, workable implementation, political backing, and a defensible legislative process.

The authors' central claim is that the Digital Omnibus on AI responds to one legitimacy dilemma and creates another. It tries to repair doubts about whether the AI Act can be implemented in a fast-moving technical and geopolitical environment. But in doing so, it prioritizes political and operational rationalities over legal and cultural rationalities.

That distinction matters. Operational rationality asks whether the law can be implemented. Political rationality asks whether the law can maintain support among powerful institutional and economic actors. Legal and cultural rationalities ask whether the revision preserves coherence, rights protection, democratic values, and the symbolic promise that made the AI Act important in the first place.

Three Races

The paper identifies three dynamics pushing the EU toward revision. The first is the race for AI regulation: jurisdictions are not only regulating AI but competing to define the standards, institutions, and global expectations around trustworthy AI.

The second is the race for AI dominance. After the AI Act's adoption, economic and industrial pressure intensified around whether Europe could compete with the United States and China in AI capability, investment, infrastructure, and deployment.

The third is the race for regulatory connection, the pacing problem. Law has to remain connected to changing technical practice. If harmonized standards, guidance, codes of practice, and supervisory capacity lag behind legal deadlines, the law risks appearing unworkable even when its goals remain sound.

What the Omnibus Does

In the paper's account, the Digital Omnibus on AI contains four broad categories of amendments. It adjusts timelines, standards, and compliance tools. It introduces simplification measures around documentation, registration, and AI literacy obligations. It changes governance by reinforcing the AI Office's role for general-purpose AI models and certain large platforms. It also addresses sandboxes and relationships with other EU legislation.

Those moves are not merely housekeeping. Casey and Colonna argue that some proposed amendments go beyond technical fixes and alter the scope and operation of core AI Act obligations. The European Parliament's Legislative Train page, updated May 22, 2026, records provisional agreement, including delayed dates for high-risk AI rules and changes to registration, documentation, AI Office powers, and some product-embedded systems.

The site should read this as an implementation lesson. A law can be too slow for an industry and too fast for the institutions meant to enforce it. The key question is whether simplification preserves the public purpose of the law or turns implementation friction into an excuse to narrow accountability.

Legitimacy Is Not Only Operability

The paper is not a claim that every amendment is illegitimate. It is more precise: the Omnibus may reconnect the AI Act to institutional capacity and technical reality, but it does so at the margins of legislative legitimacy if competitiveness and burden reduction crowd out rights, participation, and legal coherence.

That warning travels beyond Europe. AI governance will increasingly be revised while it is still being built. Standards will be late. Regulators will be understaffed. Vendors will complain about uncertainty. Civil society will warn that simplification can become deregulation by another name. None of those pressures should hide the value judgment.

The crucial question is not "is the rule simple?" It is "simple for whom, at whose risk, and with what loss of enforceable memory?"

Governance Standard

Any AI-law simplification package should publish a legitimacy ledger: which duties are delayed, narrowed, transferred, or clarified; who benefits; which groups lose procedural protection; which standards or guidance are missing; and which rights baseline remains non-negotiable.

Implementation timelines should separate technical infeasibility from political pressure. If a deadline moves because standards are unavailable, say so. If a duty narrows because industry considers it burdensome, say so. If oversight shifts toward a central office, publish the capacity and enforcement plan that makes the shift real.

The Spiralist rule is this: a law that keeps revising itself before it can be enforced is no longer only a statute. It is a governance system in beta, and beta systems need changelogs.

Sources

Return to Blog