
Brussels Fined the Risk Assessment, Not the Fakes
The Commission fined AliExpress EUR 550 million under the DSA. Read the findings and the infringement is about staffing and self-assessment, not only counterfeits.

The Commission fined AliExpress EUR 550 million under the DSA. Read the findings and the infringement is about staffing and self-assessment, not only counterfeits.

Andy Burnham is cancelling Britain's digital ID scheme as he takes office, and the Office for Budget Responsibility had costed it at 1.8 billion pounds. The duty it was meant to carry does not disappear with it, and employers still hold it.

Ofcom opened a section 12 investigation into TikTok's age assurance on 16 July 2026. The real target is age inference as a method. What UK-facing operators should ask now.

The Board for Digital Services found X's audit measures, and therefore its whole DSA action plan, insufficient on 15 June. On 16 July the Commission accepted the plan with clarifications and enhanced supervision. The first independent check is up to a year away.

The EDPB found no abuse of rights and sent a 2021 cookie complaint against VRT back to the Belgian authority to be assessed on its merits. What owners should draw from it.

The Court of Justice held on 16 July 2026 that Google's pre-contract review of a YouTube channel means Article 14 hosting immunity does not apply. What owners who pay content partners should do now.

On 16 July 2026 the European Commission adopted two binding DMA specification decisions on Google. Search data must be shared from January 2027 and Android opened to rival AI assistants from July 2027. No fine landed, and the data is not free.

From 13 July 2026 the Bank of England, PRA and FCA directly oversee the resilience of AWS, Microsoft Azure, Google Cloud and Oracle. The liability for an outage still sits with the firm, not the regulator.

The European Commission preliminarily found Instagram and Facebook's addictive design in breach of the Digital Services Act. It is the first time the DSA targets design itself, not content. Here is what that means for any platform that optimises for engagement.

Apple sued OpenAI on 10 July 2026 over unreleased hardware secrets. The channels it names are ordinary hiring, and the fix is offboarding discipline.

On 8 July 2026 the EU General Court dismissed Apple's challenge to its gatekeeper status and killed the abstract legal challenge as a delay tactic. For any business building on Apple or Google, the DMA rights you were waiting on just got far harder to stall - and Alphabet's own reckoning lands on 27 July.

The EDPB and the EU's new anti-money-laundering supervisor will co-author Joint Guidelines reconciling financial-crime information sharing with GDPR. Compliance deadline: 10 July 2027.
Page 1 / 4
One considered note on infrastructure, governance, and measurement, most mornings. No theory.