Skip to content
You can now search across every topic, entity and event.What's new
European Tech Sovereignty
7MAY

Meta breaches DSA on child safety

2 min read
10:13UTC

The European Commission found Meta in breach of the Digital Services Act on Wednesday 29 April for insufficient child safety protections on Instagram and Facebook, on a track separate from its earlier €200m DMA fine.

← Back to CISPE moves first; Brussels misses againJump to analysis ↓
TechnologyDeveloping
Key takeaway

Meta now faces three concurrent Brussels enforcement tracks across the DSA, the DMA, and the WhatsApp AI objections.

The European Commission found Meta in breach of the Digital Services Act (DSA) on Wednesday 29 April for insufficient child safety protections on Instagram and Facebook 1. The finding sits on a track separate from Meta's existing €200 million DMA fine and the Commission's preliminary DMA objections to Meta over the WhatsApp artificial-intelligence assistant exclusion .

The DSA track turns on platform-governance obligations, not competition or interoperability. Where the DMA targets gatekeeper conduct toward business users and rivals, the DSA targets risk to end users, with child safety on very large online platforms one of the named systemic risks the regulation requires designated platforms to mitigate. Meta now faces three concurrent enforcement processes in Brussels, each with its own remedy timeline; the company has not yet disclosed which it will challenge in court. the Commission's first DMA Review Report, published the day before, named cloud and AI as future enforcement priorities, leaving the consumer-platform track running in parallel to the cloud-AI expansion CAIDA is intended to anchor.

Deep Analysis

In plain English

The Digital Services Act (DSA) is an EU law that requires large social media platforms to protect users, especially children, from harmful content and manipulative design. On 29 April 2026, the European Commission found that Meta, which owns Instagram and Facebook, had broken these rules by not doing enough to protect children on those platforms. This is a separate legal case from an earlier €200m fine Meta faced under different EU tech rules. The finding means Meta must now show it has fixed the problems. If it does not, it faces further fines. Child safety advocates say the real issue is that Instagram's recommendation system was designed to keep young users engaged for as long as possible, which conflicts with rules requiring platforms to stop targeting minors based on their behaviour.

Deep Analysis
Root Causes

Instagram's recommendation algorithm was trained on engagement signals that systematically amplify content keeping minors on the platform, including content that Meta's own internal research identified as harmful. Disabling the algorithm for under-18 accounts reduces engagement metrics and advertising revenue by an average of 22% for those users (Meta Q4 2024 earnings call). That financial cost is the structural reason Meta did not voluntarily comply before the DSA imposed the obligation.

The DSA creates two separate child-protection obligations: Article 28 (design-level prohibition on specific targeting practices for minors) and Article 34 (systemic risk assessment and mitigation). The breach finding covers Article 28, which is easier to prove but requires product changes that reduce minors' engagement time, making remediation commercially costly in a way that a fine alone is not.

What could happen next?
  • Precedent

    A successful Article 28 breach finding against Meta on design-level targeting obligations creates a direct precedent for similar proceedings against TikTok, YouTube, and Snapchat, all of which operate comparable recommendation systems for minors.

  • Risk

    If Meta's DSA remediation measures are accepted while its DMA fine remains at €200m, it confirms that trading compliance across simultaneous proceedings is viable, weakening the incentive structure for all DSA enforcement actions.

Sources:IT Pro·Handelsblatt·Digital Watch Observatory
Mentions:Meta →European Commission →Instagram →Cambridge →Digital Services Act →
First Reported In

Update #4 · CISPE moves first; Brussels misses again

IT Pro· 7 May 2026
Read original →
Different Perspectives
Germany (Bundeskartellamt)
Germany (Bundeskartellamt)
Germany's Bundeskartellamt declined to open antitrust proceedings against SAP, the company disclosed on 30 July, in the same fortnight the Commission's EUR 890m DMA fine against Google approached its 21 September compliance deadline. A German software champion cleared domestic scrutiny while an American platform faces enforcement, in the same regulatory season.
United States (USTR)
United States (USTR)
Washington's Section 301 investigation into EU digital enforcement, opened 24 July, had produced no Federal Register docket as of 4 August, even as Dell and 1,008 Nvidia GB200 NVL4 accelerators sit inside the EU's own sovereignty-branded MeluXina-AI build. The absent docket and the American hardware inside a European sovereignty project pull the same relationship in opposite directions.
UK government
UK government
The UK's Sovereign AI vehicle took a nine-figure equity stake in chip startup OLIX on 30 July, its fifth deal since April, while the Cabinet Office's 27 July fact sheet named no accounting officer for the GBP 1.1bn AI Hardware Plan. Whitehall is buying equity rather than capacity, inside a department mid-rename to Business, Innovation, Science and Trade.
Luxembourg government
Luxembourg government
Luxembourg is covering half of the newly disclosed EUR 80m contract value for MeluXina-AI, EuroHPC's Grand Duchy build, with Dell Technologies confirmed as supplying 1,008 Nvidia GB200 NVL4 accelerators, a hardware detail absent from the earlier project description. The disclosure means Luxembourg's national co-funding buys a facility built on American silicon under a European ownership badge.
European Commission
European Commission
The Commission activated its Article 101 fining power on 2 August while the Article 70 register it must keep current still showed a 26 September 2025 footer and blank rows for Denmark, Finland and Hungary. It issued no comment, though Article 70 puts the publication duty on Brussels, not member states.
China's Ministry of Commerce
China's Ministry of Commerce
Spokesperson He Yadong said on 16 July that Beijing and the Netherlands should let firms settle the Nexperia dispute through consultation, after a Dutch ministerial visit to Beijing. The conciliatory tone contrasts with the confrontational US trade response to the same fortnight's DMA enforcement.