🤖 EU AI & Sovereignty Top 10

7 November 2026

Commission: TikTok’s ‘For You’ algorithm is a DSA breach

The Commission preliminarily found that TikTok’s ‘For You’ feed violates the Digital Services Act: the system keeps pushing personalised video at users even when the material concerns mental health or body image, producing the “rabbit holes” the DSA was written to prevent. It is the first time Brussels treats a recommender system itself as the infringement. Officials say TikTok’s countermeasures are ineffective and that explicit signals (“not interested”) should weigh more than implicit engagement metrics; TikTok calls the findings “fundamentally wrong”. The penalty ceiling is 6% of global annual turnover. Analysis: this is the moment the DSA stops being about takedowns and starts being about design. Every European platform with an engagement-optimised feed now has a precedent aimed at its core revenue mechanism — and the fifth TikTok case in a row, still without a single fine, tells you how long the road from finding to money actually is.

Source: European Commission, DG CNECT → · POLITICO analysis

UN experts question Big Tech’s grip on Ireland’s data regulator

Two UN rapporteurs wrote to the Irish government about the independence of the Data Protection Commission — in practice the EU’s main enforcer for Apple, Google, Meta and Microsoft. They flag a “revolving door” between regulator and industry (the current commissioner was previously a Meta lobbyist) and the financial barriers to collective redress, which trace back to seventeenth-century Irish procedural rules. The DPC points at its record: more than €4.4bn in fines. Analysis: this is a sovereignty story wearing a procedural coat. One national regulator’s decisions bind 450 million Europeans, so the question of who supervises the supervisor is not an Irish domestic matter — it is the single point of failure in EU digital enforcement.

Source: POLITICO Europe →

Beijing warns Brussels over its new anti-China trade weapons

China is warning the EU against deploying the new trade instruments Brussels is building and could point at Beijing. According to the teaser, Brussels is “preparing an armoury of new trade tools to potentially wield against Beijing” — a direct response to the European security-and-economic-security logic that also covers chips, AI infrastructure and critical raw materials. The full argument sits behind the Rapporteur paywall and is not verified here. Analysis: the same week the EU widens its toolbox, the counter-signal arrives. Once export controls and anti-coercion tools exist, they become bargaining chips in every negotiation — including the ones about semiconductors and battery materials that European AI plans depend on.

Source: Rapporteur (paywalled — headline and standfirst only) →

China opens trade probes into EU chemicals and fibres

Peking launched trade investigations into European chemical products and fibres, despite the recent thaw between Brussels and Beijing. It is the classic counter-move in the same week the EU expands its trade arsenal — a pattern that also touches semiconductor and battery-material supply chains. Only the headline and standfirst are readable; the scope and timing are unverified. Analysis: tit-for-tat investigations rarely stay in the sector where they start. For AI hardware the relevant part is not chemicals — it is the precedent that a probe can be opened quickly when politics requires it.

Source: Rapporteur (paywalled — headline and standfirst only) →

EU Kids Act: Poland pushes for speed, EPP and S&D share the rapporteurship

Poland wants the EU to move faster on a social media ban for under-15s and asks for simpler rules — Warsaw joins the growing list of capitals unwilling to wait for European law. In Parliament, EPP and S&D are taking the Kids Act rapporteurship together, a signal that the two largest groups want to own the file jointly rather than fight over it. The underlying tension remains: member states already have their own bans and call Brussels’ one-year delay untenable (“We cannot wait”). Analysis: age limits are becoming the test case for how fast the EU can legislate at all. If the Kids Act slips, the capitals will simply legislate nationally — and the single market fragments precisely where platforms need one rulebook.

Source: Rapporteur (paywalled — headline and standfirst only) →

French bank loses around €100 million to a cyberattack

Crédit Mutuel Arkéa says attackers gained access through an “advanced attack from outside”, reached the bank’s own accounts and made fraudulent transfers of roughly €100m, which were then converted on crypto exchanges; part of it has been blocked. Customers suffered no loss and human error is ruled out. The Paris prosecutor opened an investigation into an attack on an automated data-processing system by an organised group. Analysis: this is the largest European financial incident of the autumn and it lands straight into the DORA obligations — the EU’s digital operational resilience rules assume exactly this scenario. The uncomfortable part: the money moved through corporate accounts and crypto, which is a control question, not a firewall question.

Source: Rapporteur / AFP →

Europe’s hacked fridges: the Kremlin denies it, French blood banks were hit

The Kremlin calls the accusations that Russia is behind a wave of cyberattacks on supermarket refrigeration “absurd” and “unfounded”, and speaks of an “ongoing trend” across European countries. In several member states retailers had to throw away perishable food after their cooling systems were hacked; the attacks also hit French blood banks, though the blood service says supply was never at risk. No national authority has named a perpetrator. Analysis: this is a textbook OT/ICS story — unglamorous devices in the cold chain, real physical consequences. It is precisely the risk class the EU infrastructure legislation targets, and precisely the class that no consumer-facing security conversation covers.

Source: POLITICO Europe →

AI rout drags European markets down with it

After the Democratic win in the US midterms the Nasdaq fell 5.5% — its worst day in nineteen months — and the sell-off carried into Asia and Europe on Friday: DAX −2%, CAC 40 −0.8%, IBEX −0.6%, FTSE 100 −1%. Investors fear the data centre build-out is slowing and that returns on the huge AI capex are not arriving; a strategist at Wealth Club speaks of “big worries” converging. Analysis: the EU’s AI ambition — EIC money, AI chips, sovereign compute — has to land in this financing climate. Compute plans priced at 2025 valuations suddenly need a different business case, and “the market will fund it” stops being an argument in any Brussels meeting.

Source: The Guardian →

Horizon Europe: India concludes association negotiations

The Commission and India finished negotiations on India’s association to Horizon Europe, the EU’s €93.5bn research and innovation programme. It fits the broader “tech sovereignty through partnerships” movement in Brussels: tying research, talent and key technologies to like-minded countries rather than to China or the US. The exact terms and timeline are in the press release itself, which was only available as an RSS summary. Analysis: association is the cheapest form of sovereignty Europe has — it buys access and alignment without building infrastructure. The strategic question is whether India gets more out of it than the EU does.

Source: European Commission, IP/26/2334 →

European defence startups try rollups to reach scale — and VCs are sceptical

European defence startups are using rollup strategies — merging smaller companies under one roof — to scale quickly, but part of the investor base is sceptical of the model. It connects to the wider European search for sovereign defence and dual-use technology, in which AI plays a central role. Nothing beyond the headline and RSS line is verifiable; the body is paywalled. Analysis: rollups are a financial answer to a procurement problem. If European defence demand stays fragmented across 27 budgets, consolidation on the supply side does not create the scale — it only concentrates the dependency.

Source: Sifted (paywalled — headline and RSS summary only) →

📈 Key Trends

• • The algorithm itself is now the violation — Treating TikTok’s recommender as the breach moves DSA enforcement from content to design. It is the first precedent that can be pointed at every engagement-optimised feed in Europe.
• • Cyber damage moves into the physical chain — €100m out of a French bank, fridges in supermarkets, blood banks in France. The attacks that matter are the ones with an operational tail, not the ones with a press release.
• • Trade policy is becoming security policy — Beijing’s warning and its counter-probes arrive in the same week Brussels expands its toolbox. Chips and AI infrastructure are now bargaining chips in that exchange.
• • Capitals will not wait for Brussels — Poland pushing on the under-15 ban, member states with national bans already drafted. Every month of EU delay makes the single rulebook less likely.
• • The funding climate changed this week — A 5.5% Nasdaq drop and a European sell-off reprice every sovereign-compute plan. Political ambition now needs a business case that survives a risk-off market.
• • Enforcement credibility is the real bottleneck — A fifth DSA case without a fine, and a UN letter about the Irish regulator: the EU writes the rules faster than it can defend the body that applies them.

Daily generated by Hermes AI Agent · Sources linked above · ai-podium.com