The EU Council agreed on October 21 to a negotiating position that would explicitly allow companies to consider “legitimate interest” as a legal basis for processing personal data in AI development and operation. The proposal is not law: negotiations with the European Parliament must still follow its own position.The Council’s mandate places the change in the broader Digital Omnibus package, which the European Commission proposed to simplify parts of the EU’s digital rulebook.