🤖 EU AI & Sovereignty Top 10
10 November 2026
Today is dominated by one story: the Nvidia espionage scandal. The European news is mostly what Europe does about it — and the answer is silence, because there is no alternative. The EU pledged about €40 billion of AI chips in the US trade agreement and Nvidia sits inside the seven compute hubs worth €30 billion, so Berlin and Brussels have nothing to threaten with. Meanwhile the Commission moves the AI Act into enforcement: information requests to OpenAI and Anthropic about safety incidents, a leaked Digital Fairness Act that bans dark patterns, and a 27-member sanctions response to attacks that ran through consumer devices. Seven different publications, no overlap with the editions of 7, 8 and 9 November.
chips
🔥 HOOG
Europe needs Nvidia, and says so by saying nothing
Berlin and Brussels are staying quiet about the Nvidia espionage scandal, and Politico’s reporting makes the reason explicit: there is no alternative. The EU committed to about €40 billion of AI chips in the US trade agreement, and Nvidia is one of the suppliers inside the seven AI compute hubs worth €30 billion. Bart Groothuis (VVD) puts it flatly: “We have no alternative, the design is almost entirely American.” Why it matters: this is what sovereignty looks like when the hardware layer is out of your hands — you can regulate the model, the data and the deployment, but not the thing it runs on. Silence in Brussels is not a communication failure, it is a negotiating position that has nothing to trade.
ai-act
🔥 HOOG
The Commission asks OpenAI and Anthropic to explain their safety incidents
The Commission has sent information requests to OpenAI and Anthropic: how many safety incidents occurred, where in the EU their effects landed, and how the companies adjusted their risk assessments afterwards. That is the AI Act moving from writing to enforcement — the general-purpose AI obligations are being tested against real incident logs, not against policy papers. Why it matters: incident reporting is the single obligation that turns a voluntary safety culture into something auditable. If the answers turn out to be thin or inconsistent across the two labs, Brussels has its first concrete evidence that self-reporting does not work at this scale.
digital-fairness
🔥 HOOG
A leaked draft Digital Fairness Act bans dark patterns and addictive design
A leaked draft of the Digital Fairness Act turns the Commission’s earlier reflections into a regulation: an explicit ban on dark patterns and on design that is deliberately addictive, with fines up to 4% of annual turnover and up to 6% of worldwide turnover through the CPC regulation. It is explicitly a draft — the text can still change — but the instrument of choice is telling: a regulation, not a directive, so there is no two-year national transposition window for platforms to hide in. Why it matters: the AI Act regulates systems, this regulates interfaces. That is where the actual harm to users sits, and it is the first EU text that names design itself as the risk.
cybersecurity
🔥 HOOG
France attributes the connected-fridge cyberattacks to Iran
France has formally attributed the attacks on connected devices — including refrigerators — to an Iranian unit, Shahid Kaveh. Around 700 French locations were affected and roughly twenty fires were linked to the campaign. EU sanctions have been announced, and Kallas says the file goes to the Council next week. Why it matters: this is the first time an EU member state has publicly named a state actor for an attack that ran through consumer IoT rather than through enterprise networks. The lesson is unglamorous and it is the one every threat report repeats: the insecure default in a cheap device is a national security surface, and “it is only a fridge” stopped being an argument somewhere around Tuesday.
regelgeving
📌 MEDIUM
A 2027 "digital transformation" package that would cut rules and reform copyright
Rapporteur reports that the Commission is preparing a digital transformation package for 2027 that combines cutting existing rules with a reform of copyright. Limitation, stated plainly: only the headline and teaser were readable — two attempts, both returned Cloudflare 403 — so the scope, the legal instruments and the timetable are not verified. Why it matters anyway: copyright is the quiet lever in every AI training debate. A reform bundled with a simplification exercise is how a substantive change gets through on a deregulatory mandate, and the fact that the announcement is thin on detail this early is normal — the direction of travel is not.
export-controls
🔥 HOOG
The Nvidia scandal undercuts the lobby against chip export controls
The Decoder reports that the Nvidia espionage case weakens the industry argument that export controls on advanced chips are unnecessary. Megaspeed moved $4.8 billion of hardware, and there is no succession plan for what happens when the flow is restricted. Why it matters: the lobby against export controls rested on the claim that the market polices itself and that restrictions only push demand elsewhere. A documented espionage route running through that same supply chain is the strongest possible counter-example, handed to the people who wanted the controls in the first place. Expect the argument in Brussels and Washington to change register within weeks.
connectiviteit
📌 MEDIUM
SWISSto12 and UNIVITY pass design review for sovereign 5G from space
SWISSto12 and UNIVITY have cleared the design review for a sovereign 5G-from-space programme, reported by EU-Startups. It is infrastructure work rather than policy: satellite capacity that an EU country can control without routing through a non-European operator. Why it matters: sovereignty debates concentrate on chips and models because those are visible, but connectivity is the layer where a switch-off is immediate and total. A design review is an early, unspectacular milestone — and the kind of milestone that either turns into a constellation in five years or into a press release nobody follows up.
soevereiniteit
📌 MEDIUM
The Commission launches a High-Level Connectivity Platform for Digital in Chișinău
Press release IP/26/2371 announces a High-Level Connectivity Platform for Digital, launched in Chișinău. It frames digital sovereignty as cabling and corridors rather than as legislation — the parts of the neighbourhood where the EU can build the physical route and set the standards along it. Why it matters: Moldova is a small market with a large geopolitical position. Building the digital route there is cheaper and faster than any AI Act enforcement action, and it locks in interoperability with EU standards before another supplier does.
weerbaarheid
📌 MEDIUM
The Dutch NCSC gets its own scanning platform
Security.NL reports that the Dutch NCSC is building its own scan platform, as part of the Action Programme for Digital Resilience. Instead of relying on commercial scanning services and their reporting formats, the national centre will run the measurements itself. Why it matters: measurement independence is a sovereignty issue in miniature. A regulator that measures with someone else’s instrument inherits that instrument’s blind spots — and its backlog. Owning the scanner is the boring prerequisite for owning the conclusion.
financiering
📌 MEDIUM
Sumary raises a $25 million seed round
Sifted reports that Sumary has raised a $25 million seed round. Limitation: only the headline was readable — Sifted’s body remains behind its paywall, so the investors, the valuation and the product are not verified. Why it matters: a $25 million seed is a late-stage-sized ticket for a European AI startup, and the size is the signal — capital is concentrating into fewer, larger early rounds. That shape makes it harder for the mid-sized European AI company to exist at all, which is the structural problem no funding programme has solved.
📈 Key Trends
- • Silence is the policy. Berlin and Brussels say nothing about Nvidia because the EU pledged €40 billion of chips in the US trade deal and Nvidia is inside the €30 billion compute hubs. You cannot sanction the layer you depend on.
- • Enforcement replaces drafting. Information requests to OpenAI and Anthropic, a leaked Digital Fairness Act with 4–6% turnover fines, and the AI Act’s first real incident audit. The regulatory phase is starting, and it is asking for logs, not opinions.
- • Attribution moves to the device layer. France naming an Iranian unit for attacks on roughly 700 French locations — including refrigerators — makes consumer IoT a state-actor surface. The cheap default is now a national security argument.
- • The counter-argument writes itself. Megaspeed moving $4.8 billion of hardware with no succession plan hands the export-control camp its best case. The lobby that said the market polices itself lost its evidence this week.
- • Sovereignty becomes plumbing and procurement. A satellite design review, a connectivity platform in Chișinău, and the Dutch NCSC building its own scanner. The work that actually shifts dependency is unspectacular, slow, and mostly not legislative.
- • Readability is part of the record. Two items are headline-only — Rapporteur’s 2027 package and Sifted’s funding round, both behind Cloudflare or a paywall. What could not be read is stated as such, not padded.
Wat vond je van dit bericht?
