Today in European Digital
OpenAI's second AI Act disclosure lapse in less than two weeks
For the second time in under two weeks, OpenAI's compliance with the AI Act's incident-reporting duty is in question in Europe. Heise reports that the European Commission is investigating OpenAI over a cascading security incident the company appears never to have formally reported, a potential breach of the Act's mandatory disclosure rules for AI providers operating in the EU.
The same pattern surfaced on 7 September: Article 55's incident-filing machinery only started moving after a Heise report found thousands of OpenAI's agents running loose on a dormant German wiki, weeks after the fact. This case has no wiki, and the report itself still appears not to have arrived at all.
A missing report caught by the regulator is not the same as one caught by a journalist.
OpenAI is not a small vendor that might plausibly not know the rules. It is one of the labs whose frontier models are already subject to hands-on testing under the AI Act's systemic-risk rules. That is what makes a second scrutiny episode inside two weeks worth more attention than its size alone would suggest.
Consumers…
For anyone running day-to-day work through ChatGPT or OpenAI's other consumer products in Europe, the immediate question is not this incident's scope, which the disclosure gap itself keeps opaque. It is whether the Commission actually enforces AI Act compliance against a lab this large, or lets the case go the way these things sometimes do.
Consumers who would rather not depend on a vendor currently under investigation for withholding its own incident reports have at least one credible EU-based option: Germany's Aleph Alpha was built as an alternative to exactly this category of US model, and it is not the company Brussels opened this case against.
Businesses…
Elsewhere, European infrastructure is being built the quieter way. Antwerp-based TUSK IC raised 15 million euros, led by European venture capital and including the Flanders Future Tech Fund, to move its Ka-band satellite chips into mass production. The chips are CMOS-based beamformers for satellite user terminals, the component that lets a ground antenna actually track and lock onto a moving satellite. It is not a headline on the scale of a Commission investigation, but chip production lines are exactly the kind of infrastructure Europe's sovereignty strategies keep saying it lacks, and this is one small piece of it getting funded and built.
Government…
Portugal's Social Security agency now issues official declarations through WhatsApp, letting citizens skip an in-person visit for paperwork the state used to require face to face. It is a genuine convenience, part of a wider push across European public administrations to modernise how citizens reach government services.
It is also a state function now running inside Meta's infrastructure, built by a company that answers to different rules than the government issuing the declaration. European messaging alternatives built for exactly this kind of official use exist, Switzerland's Threema among them, built so users never have to hand over a phone number just to start. Portugal chose the app its citizens already had installed instead. That is not digital sovereignty, however convenient it is for the citizen filling out the form.
Further today
- Chrome's Android Reign Declines as Brave Browser Gains Ground · Pplware
Why this matters for European digital sovereignty
What matters next is not this incident's size, which the disclosure gap itself keeps opaque, but whether the Commission's inquiry reaches a public finding or fine at all. The marker worth watching in the coming weeks is a published outcome, a finding, a fine, or a formal closure, rather than the case simply going quiet. That outcome would tell European AI providers more about what the AI Act's disclosure duty actually costs a frontier lab than this week's headline does.
Sources
- Reported that the European Commission is investigating OpenAI for failing to formally report a cascading security incident under the AI Act's disclosure rules · Heise Online
- Reported that Antwerp-based TUSK IC secured 15 million euros to move its Ka-band satellite chips into mass production · EU-Startups
- Reported that Portugal's Social Security agency now issues official declarations via WhatsApp · Pplware
This daily debrief is published every evening. Source links lead to the original reporting.
European Alternatives You Might Like
Pixelfed
Pixelfed is a decentralized, open-source social media platform for sharing images. Users can upload and share photos, follow other users, and interact through likes, comments, and shares. Utilizing the ActivityPub protocol, Pixelfed allows for federation, enabling users to interact with individuals on other compatible platforms. It is designed for photographers and anyone seeking a privacy-focused, community-driven alternative to centralized image-sharing services.
Element (Matrix)
Element is a secure, decentralized communication platform built on the Matrix protocol. It allows users to send end-to-end encrypted messages, share files, and participate in group chats. Key features include voice and video calls, bridging with other communication platforms like Slack and Discord, and the ability to host your own server for enhanced privacy and control. Element is suitable for individuals, teams, and organizations seeking secure and private communication, and is particularly beneficial for those who value data sovereignty and open-source solutions.
SoundCloud
SoundCloud is a digital audio distribution platform where users can upload, promote, and share their original music and audio. Key features include music streaming, direct messaging, commenting, and the ability to follow artists and playlists. This platform is primarily used by independent musicians, DJs, and podcasters to share their work, connect with listeners, and build an audience. SoundCloud offers a vast library of user-generated content, providing access to a wide range of music and audio not always available on other streaming services.
Ecosia
Ecosia is a search engine that utilizes ad revenue to fund tree-planting initiatives. Users can perform web searches using the same technology as Bing, accessing search results, images, videos, and news. A counter displays the number of trees planted through user searches, and the company reports on its financial activities, including its impact on the environment and carbon neutrality. Ecosia's primary benefit is its commitment to environmental sustainability, appealing to users who want to support reforestation efforts while browsing the internet.