Brussels has for the first time officially confirmed, and attributed to foreign governments, state backed spearphishing of senior EU officials on WhatsApp, the same week a separate report flags that European timekeeping still leans on GPS. Two ends of the same problem: the rules for European digital sovereignty are advancing, the infrastructure underneath them still isn't.
A regional German court has ordered Amazon to rebuild its DSA reporting flow and explain its search algorithm properly, proof the Digital Services Act can reach past Brussels' record fines against AliExpress and Temu into how a platform is actually built. Days later, a capacitor shortage driven by AI data centres is squeezing Volkswagen, Stellantis and BMW, a reminder that writing the rulebook is not the same as controlling the supply chain underneath it.
Apple bent to Digital Markets Act pressure from two directions at once, national AI Act rollouts drew their first serious internal criticism, and privacy regulators kept testing where data anonymization actually ends. Underneath it all, investors kept betting on European-owned AI infrastructure as an answer to dependency on foreign platforms.