The European Commission has preliminarily found TikTok in breach of the Digital Services Act (DSA) over the "rabbit hole" effect of its "For You" feed. The more a user watches or likes a type of content, the more similar content the algorithm recommends. Repeated exposure to content on sadness, isolation, weight loss or body image can harm users' mental health, especially vulnerable adults and minors. The Commission preliminarily finds that TikTok did not adequately assess these risks, and that its mitigation measures are not effective. Measures to diversify recommendations do not sufficiently reduce how often similar content appears, and user controls such as the "not interested" button may not be enough to change the feed, as the algorithm prioritises viewing time over users' choices. The Commission preliminarily considers that TikTok needs to change the design of the "For You" feed. It should rely more on users' explicit preferences, disable viewing time as a signal for recommending content, make user controls more accessible and usable, and regularly test its algorithm. TikTok can now exercise its right of defence and reply in writing. If the findings are confirmed, the Commission may issue a non-compliance decision with a fine of up to 6% of TikTok's total worldwide annual turnover. The preliminary findings do not prejudge the outcome of the investigation.

On 21 October 2026, the European Commission opened formal proceedings to assess whether Booking.com may have breached the Digital Services Act by not diligently assessing or mitigating risks from fraudulent listings and phishing scams, and by not clearly labelling paid-for boosted listings as advertisements. Opening of proceedings does not prejudge the outcome.

The European Commission has preliminarily found that TikTok accounts of minors do not meet the safety standards required under the Digital Services Act (DSA). On TikTok, minors can choose to set their account as ‘public'. This means that any user, including those without a TikTok account, may be able to view minors' content. This setting also allows content published by ‘older' minors (16-17 years old) to be recommended to any other TikTok user through the For You Feed. The Commission preliminarily considers that TikTok – in line with the Guidelines on the protection of minors – should adjust the default settings of minors' ‘public' accounts, so that their content is, by default, visible only to TikTok users whom the minor has accepted.

The European Commission fined AliExpress €550 million for breaching its obligations under the Digital Services Act (DSA) to diligently assess and mitigate risks relating to the sale of illegal, unsafe or counterfeit products on its e-commerce platform. The non-compliance decision is based, amongst others, on AliExpress' 2023 and 2024 risk assessment reports; additional data provided by the platform, in particular in reply to the Commission's formal requests for information on 6 November 2023 and 18 January 2024; information shared by third parties; as well as the Commission's own investigative actions.

The European Commission preliminarily found Instagram in breach of the DSA over its "addictive design," citing features such as autoplay, infinite scroll, push notifications, and personalised recommender systems. The investigation indicates that Meta did not adequately assess the risks of its addictive design on the physical and mental wellbeing of users, including minors and vulnerable adults with evidence showing that Meta's current mitigation measures failed to effectively tackle the risks stemming from its addictive design.

The European Commission preliminarily found Facebook in breach of the DSA over its "addictive design," citing features such as autoplay, infinite scroll, push notifications, and personalised recommender systems. The investigation indicates that Meta did not adequately assess the risks of its addictive design on the physical and mental wellbeing of users, including minors and vulnerable adults, with evidence showing that Meta's current mitigation measures failed to effectively tackle the risks stemming from its addictive design.

The German Digital Services Coordinator (DSC) at the Bundesnetzagentur has identified preliminary infringements of various provisions of the Digital Services Act (DSA) in an investigation into online marketplace eBay. The DSC launched proceedings against eBay in early January 2026 following user complaints, its own investigations, and evidence provided by the French consumer protection authority, and identified infringements relating to the notice-and-action mechanism (Article 16), statements of reasons for user restrictions (Article 17), and trader traceability obligations (Article 30). eBay now has the opportunity to respond and remedy the issues. If it fails to do so, the DSC can order measures for compliance with the DSA provisions and impose periodic penalty payments for enforcement purposes.

On 28 May 2026, the European Commission imposed a fine of €200 million on Temu under the Digital Services Act for failing to diligently identify, analyze, and assess the systemic risks posed by illegal products offered on its platform and the resulting harm to consumers in the European Union.

On 5 May 2026, Coimisiún na Meán, Ireland’s Digital Services Coordinator, commenced two formal investigations into Facebook to examine: a) Whether users can select and modify their preferred recommender system in a direct and easily accessible manner, through Facebook's interfaces (Article 27(3)), b) Whether Facebook's interfaces use deceptive or manipulative design (“dark patterns”) to discourage users from choosing a recommender system not based on profiling (Article 25(1).

On 5 May 2026, Coimisiún na Meán, Ireland’s Digital Services Coordinator, commenced two formal investigations into Instagram to examine: a) Whether users can select and modify their preferred recommender system in a direct and easily accessible manner, through Instagram’s interfaces (Article 27(3)), b) Whether Instagram’s interfaces use deceptive or manipulative design (“dark patterns”) to discourage users from choosing a recommender system not based on profiling (Article 25(1)).

On 29 April 2026, the European Commission preliminarily found Meta's Instagram in breach of the Digital Services Act for failing to diligently identify, assess and mitigate the risks of minors under 13 years old accessing its services.

On 29 April 2026, the European Commission preliminarily found Meta's Facebook in breach of the Digital Services Act for failing to diligently identify, assess and mitigate the risks of minors under 13 years old accessing its services.

The Commission opened formal proceedings to investigate if Snapchat is ensuring a high level of safety, privacy and security for children online, in compliance with the Digital Services Act (DSA).

On 26 March 2026, the Commission issued preliminary findings that Pornhub breached the DSA for failing to assess risks to minors and implement effective age verification measures.

On 26 March 2026, the Commission issued preliminary findings that Stripchat breached the DSA for failing to assess risks to minors and implement effective age verification measures.

On 26 March 2026, the Commission issued preliminary findings that XNXX breached the DSA for failing to assess risks to minors and implement effective age verification measures.

The Commission opened formal proceedings against Shein, under the Digital Services Act, for its addictive design, the lack of transparency of recommender systems, as well as the sale of illegal products, including child sexual abuse material.

The Commission preliminarily found TikTok in breach of the Digital Services Act for its addictive design. This includes features such as infinite scroll, autoplay, push notifications, and its highly personalised recommender system. The investigation preliminarily indicates that TikTok did not adequately assess how these addictive features could harm the physical and mental wellbeing of its users, including minors and vulnerable adults.

The Netherlands Authority for Consumers and Markets (ACM) launches an investigation into online game platform Roblox in connection with possible risks that minors in the EU face on the platform. In its investigation, ACM will assess whether the game platform takes sufficient measures to protect minors on its service.

The Commission has launched a new investigation against X to assess whether the company properly assessed and mitigated risks associated with the deployment of Grok's functionalities into X in the EU. This includes risks related to the dissemination of illegal content in the EU, such as manipulated sexually explicit images, including content that may amount to child sexual abuse material.

Following its preliminary findings on shortcomings in TikTok’s advertising transparency, the Commission has accepted binding commitments from TikTok to bring its ad repository into full compliance with the DSA’s requirements for very large online platforms. TikTok will now provide the full content of ads (including URLs), update the repository within 24 hours, disclose targeting criteria and aggregated reach data (by age group, gender and Member State), and offer improved search and filtering so that regulators, researchers and users can more easily scrutinise advertising on the service.

The Commission imposed a €120 million fine on X in its first non-compliance decision under the DSA, for breaching platform transparency obligations. The decision focuses on three areas: the deceptive design of its “blue checkmark” and other dark patterns that mislead users - Article 25; the lack of transparency and accessibility of its advertising repository - Article 39; and the failure to provide vetted researchers with access to public data - Article 40.

The investigations will look into: Whether the illegal content reporting mechanisms implemented by TikTok and LinkedIn are easy to access and user-friendly – Article 16(1); Whether the illegal content reporting mechanisms provided by TikTok and LinkedIn allow people to report suspected child sexual abuse material anonymously – Article 16(2)(c); Whether the illegal content reporting mechanisms provided by TikTok and LinkedIn deceive people from reporting content as illegal – Article 25.

The investigations will look into: Whether the illegal content reporting mechanisms implemented by TikTok and LinkedIn are easy to access and user-friendly – Article 16(1); Whether the illegal content reporting mechanisms provided by TikTok and LinkedIn allow people to report suspected child sexual abuse material anonymously – Article 16(2)(c); Whether the illegal content reporting mechanisms provided by TikTok and LinkedIn deceive people from reporting content as illegal – Article 25.

The Commission requested the platform to provide detailed information and internal documents on how it ensures that minors are not exposed to age-inappropriate content, in particular through age assurance measures, as well as how it prevents the circulation of illegal products on its platform. The Commission is also inquiring about the effectiveness of such mitigation measures adopted by Shein.

The investigation will look into: Whether people are able to appeal X’s decisions not to remove content when they report something that they think breaches X’s terms of service Whether people are properly informed of the outcome of a report they make and whether they are informed about their right to appeal the decision Whether X has an internal complaints-handling mechanism that is easy to access and user friendly.

The Commission found Facebook in breach of its obligations to provide users simple mechanisms to notify illegal content, as well as to allow them to effectively challenge content moderation decisions. Also, the Commission found the platform in breach of its obligation to grant researchers adequate access to public data.

The Commission found Instagram in breach of its obligations to provide users simple mechanisms to notify illegal content, as well as to allow them to effectively challenge content moderation decisions. Also, the Commission found the platform in breach of its obligation to grant researchers adequate access to public data.

The Commission preliminary found TikTok in breach of the DSA as it may have put in place burdensome procedures and tools for researchers to request access to public data.

The Commission requested Snapchat to provide information about how it prevents children under 13 years of age from accessing its services, as prohibited by the platform’s own terms of service. The Commission also requested Snapchat to provide information on the features it has in place to prevent the sale of illegal goods for children, such as vapes or drugs

The Commission requested information on its age assurance system. Additionally, the Commission is seeking more details on its recommender system, following reporting of harmful content being disseminated to minors.