The EU Says Addictive Design Can Cost 6% of Revenue

What Brussels actually said

It did not arrive as a keynote or a lawsuit. On 10 July 2026 the European Commission published a preliminary finding, the outcome of an investigation opened in 2024, stating that the addictive design of Instagram and Facebook breaches the Digital Services Act. The Commission named the features directly: infinite scroll, autoplay, push notifications and the highly personalised recommender systems that decide what appears next.

The core charge is not that any single post is illegal. It is that Meta did not adequately assess the risks these mechanics create for users' physical and mental wellbeing, including minors and vulnerable adults, and that the safeguards it did put in place were not effective. As Executive Vice-President Henna Virkkunen put it, protecting the physical and mental health of Europeans must be a priority for social media platforms. That framing, risk and duty rather than individual pieces of content, is the whole story.

The first time the DSA goes after design, not content

This is what makes the case a landmark. Until now, DSA enforcement has been about illegal content, transparency reporting and process: was a takedown system in place, were terms clear, were researchers given data. Those are questions about how a platform is run. This finding is about how a platform is built - the loops, feeds and nudges engineered to maximise time on screen.

That shift matters because design is where growth teams actually live. Infinite scroll and autoplay are not accidents; they are optimisation. By treating them as a systemic risk that must be assessed and mitigated, the Commission has moved the regulated surface from the content layer down to the engagement engine itself. For the first time, the mechanics of attention are something a European regulator claims the power to inspect.

What Meta is being told to change

The remedies the Commission points to are structural, not cosmetic. It expects features such as autoplay and infinite scroll to be off by default, real screen-time breaks to be offered, and recommender systems to be rebuilt so they are less relentlessly engagement-driven. These are not warning labels bolted on top; they change what the product does the moment a user opens it.

The exposure is set at the top of the DSA scale. A confirmed breach can draw a fine of up to 6 percent of Meta's global annual turnover, not its European revenue - a number tied to the whole business, not the region where the rule applies. Meta disagrees with the finding and points to its Teen Accounts as evidence it already protects younger users. It will now examine the file and reply before the Commission reaches a final decision.

Why this reaches past Meta

Legally the case names Meta. Practically, the patterns it targets are everywhere. Infinite feeds, autoplaying video, notification loops and engagement-tuned recommenders are the default grammar of social apps, video platforms, marketplaces and news products alike. A precedent that these mechanics are a systemic risk to be assessed does not read as a Meta problem; it reads as a design standard forming for every large service that serves EU users.

Enforcement is not centralised either. Alongside the Commission's oversight of the very largest platforms, each member state runs a Digital Services Coordinator empowered to police the same rules - the Bundesnetzagentur in Germany, Arcom in France, AGCOM in Italy, the CNMC in Spain. If your product optimises for attention and reaches European users at scale, the relevant question is no longer whether the rule applies to you, but when someone asks you to show your homework.

What to do before the template spreads

Start by mapping your default-on engagement features. Autoplay, endless feeds, streak mechanics, notification cadence and any recommender tuned purely for time-on-app are exactly the surfaces this finding puts in scope. Knowing which of them are on by default, and for whom, is the first thing a regulator or a coordinator will ask.

Then write down the risk assessment you may not have. The Commission's complaint is less about the features existing than about Meta failing to assess and mitigate their effect on wellbeing, especially for minors. An operator that can show a documented review of how its design affects users, and what it changed as a result, is in a very different position from one that treated engagement as a pure growth question. Design has become a thing you will have to defend, and the defence is cheaper to build now than under a deadline.

Read next: The EU Pried WhatsApp Open for Rival AIs  |  One AI Data Center Now Costs Fifty Billion Dollars