The European Commission said on July 10, 2026 that Meta must overhaul the addictive design of Facebook and Instagram or face a fine of up to 6% of its total global annual turnover, citing a preliminary finding that the company breached the Digital Services Act (DSA) European Commission.

The preliminary finding, published under reference IP/26/1579, targets a specific cluster of design mechanics: infinite scroll, autoplay, push notifications, and recommendation algorithms tuned for personalization and engagement TechCrunch. Brussels' language is unusually clinical for a regulatory document — the Commission wrote that these features fuel a user's urge to keep scrolling and push the brain into "autopilot mode," a phrasing that reads more like a cognitive-science paper than competition law European Commission.

The Commission's core allegation is a risk-assessment failure. Under the DSA, very large online platforms (VLOPs) are obligated to identify and mitigate systemic risks to users' physical and mental wellbeing, including for minors and vulnerable adults. Regulators concluded Meta did not do this adequately, and specifically called out the company for disregarding evidence on how much time minors spend on Instagram and Facebook overnight TechCrunch.

Meta's existing countermeasures were also found wanting. The Commission noted that time-management tools enabled by default for teen accounts can be dismissed with a tap, and therefore don't meaningfully address the underlying design incentives European Commission. The remedy list is correspondingly specific: disable autoplay and infinite scroll by default, introduce screen-time breaks that function as more than opt-in nudges, and rework the recommendation algorithm to reduce its engagement-maximizing objective function.

Procedurally, this is a preliminary finding, not a final decision. Meta retains the right to examine the Commission's evidence file and submit a formal rebuttal before any fine is confirmed TechCrunch. Meta did not immediately respond to a request for comment on the announcement.

This is the second Meta breach finding from the Commission this year. In April 2026, the Commission determined that Meta was failing to keep children under 13 off Facebook and Instagram The Guardian. Age-verification enforcement and addictive-design enforcement are legally distinct DSA obligations, but both cases turn on the same underlying premise: platform-level protections for minors have to be structurally effective, not merely present as settings a user can switch off.

The Irish regulatory environment adds another layer. On May 5, 2026, Reuters reported that Irish authorities — Meta's lead EU data-protection and DSA regulator by virtue of its regional headquarters — were separately probing Instagram and Facebook over alleged "dark patterns" that could obstruct users from exercising their EU rights Reuters. That probe and Wednesday's Commission finding are not the same proceeding, but they point at overlapping design-ethics terrain.

Meta is not the only platform in the EU's sights over compulsive-use design. TikTok was charged in February 2026 with breaching EU content rules over addictive features Reuters, and Shein came under EU scrutiny the same month for illegal product sales alongside addictive design practices Reuters. Reuters reported on July 2, 2026 that European regulators were broadly intensifying scrutiny of Big Tech platform design Reuters. Separately, the Commission's planned Digital Fairness Act, previewed by Reuters on May 12, 2026, would go further still — banning manipulative practices, addictive features, and misleading influencer marketing across digital platforms by statute rather than case-by-case enforcement Reuters.

The legal pressure on Meta isn't confined to Brussels. In a U.S. court filing around July 7, 2026, Meta disclosed that four states are seeking $1.4 trillion in penalties in a case alleging the company designed Facebook and Instagram to addict young users while misleading the public about platform safety TechCrunch; that trial is expected in August Reuters. The transatlantic timing — EU preliminary breach finding, U.S. state trial looming a month later — is coincidental in mechanism but not in subject matter: both proceedings hinge on whether engagement-optimized design constitutes a foreseeable, disclosable harm rather than an incidental byproduct of product decisions.

What's notable here, from decades of watching platform companies respond to regulatory pressure, is the gap between what the Commission is demanding and what a typical "safety update" blog post from a platform usually delivers. Toggling a default setting is trivial engineering; re-architecting a recommendation system's reward function to deprioritize engagement is not, because engagement metrics are frequently the same signals product teams use to justify their own existence internally. Whether Meta's eventual response addresses that structural tension, or simply adds another dismissible pop-up, will be the real test of whether this enforcement action changes anything for the roughly one billion daily users of Facebook and Instagram inside the EU, versus simply adding another line item to Meta's regulatory disclosures.

A DSA fine at 6% of Meta's global annual turnover would be a substantial number, though the Commission has discretion on the eventual percentage if the finding is confirmed. The more consequential question for platform design generally may be whether Brussels' definition of "effective" mitigation — as opposed to "present but dismissible" mitigation — becomes the enforcement standard other regulators borrow.