Today in European Digital
Austria enforces the GDPR that Brussels wants to redefine
Brussels' Digital Omnibus split down the middle today. The AI Act amendment cleared its next hurdle, pushing back compliance deadlines for high-risk systems, an adjustment that reads as administrative housekeeping and drew little resistance. The other half of the same package fared worse: the proposal to rewrite what counts as personal data under the GDPR is now stuck in contested interinstitutional negotiation, as Agenda Digitale reports. Delaying a compliance date is a scheduling decision. Redefining the concept the entire regulation is built on is something else entirely.
Redefining what counts as personal data is not simplification, it is subtraction.
On the same day, Austria's Supreme Court ruled that credit agency CRIF had illegally collected data on millions of people, a clear breach of the GDPR's purpose limitation principle that clears the way for a class action from noyb. The ruling is a useful reminder of what is actually at stake in Brussels' negotiating room: a national top court just enforced a core GDPR protection while the Commission's own simplification package seeks to narrow the scope of what counts as personal data in the first place. Two readings of the same law, moving in opposite directions, on the same day.
Further down the list, two European companies did what a Digital Omnibus can only regulate around: they built something. London and Hamburg based Flower Labs launched Endeavor, an AI model its founders pitch as frontier competitive and built for local deployment, with co-founder Nicholas Lane explicitly framing it as Europe no longer renting its intelligence from US companies. It joins Mistral's Le Chat, already in this site's own directory as a European alternative to ChatGPT and Claude, as another serious European answer in that category. In Zurich, sovereign email security firm xorlab raised five million euros to expand across a continent whose organisations are increasingly wary of routing sensitive traffic through US controlled infrastructure.
One funding round and one model launch do not close the gap this column has tracked for weeks, the pattern where sovereign AI money lands above the compute rather than in it. But Endeavor is a shipped product, not a pitch deck, and that distinction is worth marking.
Consumers…
Revolut launched its AI assistant, AIR, directly inside its French app today, offering to analyse spending, track investments and help with travel planning. It is a genuinely useful feature, and also a reminder that the most visible AI banking innovation reaching French consumers this week comes from a British fintech, not from one of the domestic incumbents it is squeezing.
Businesses…
For European cybersecurity buyers already juggling DORA and NIS2 obligations, xorlab's expansion is the kind of vendor update worth noting: a sovereign alternative for email security, still the entry point for most serious breaches, built to reduce reliance on US controlled infrastructure. Flower Labs is pitching Endeavor's local deployment option directly at enterprises that want frontier grade AI without shipping data to a US hyperscaler. And a reminder that sovereignty money is not only flowing into software: German firm INLEAP Photonics raised twenty million euros for laser based drone defence systems, one more sign that European investors are backing hardware as well as governance layers this year.
Government…
Italy's public administration is living the gap between what Brussels writes and what a ministry can actually operationalise. With Law 132/2025 and new AgID guidelines now in force, the country's own commentary in Agenda Digitale describes a pacing problem, where technology moves faster than the organisations meant to adopt it responsibly for real public value rather than stalled pilots. That is the practical version of the abstract fight happening in Brussels over the Digital Omnibus, where delaying an AI Act compliance date is routine and redefining personal data, still contested between the institutions, is not. Regulators watching today's Austrian ruling against CRIF have a live example of what enforcement looks like while that definition still stands.
Further today
- Italian Obesity Digital Clinic Holifya Raises €2M for AI-Supported Care · Tech.eu
- EU Commission designates ChatGPT as 'very large online search engine' under DSA · Heise Online
- 10 promising Dublin-based startups to watch · EU-Startups
- INLEAP Photonics Raises €20M for Laser Counter-Drone Systems · Tech.eu
- ID Finance secures €21M from nordIX to grow Spanish lending business · Tech.eu
- xorlab secures €5M to scale its email security platform across Europe · Tech.eu
- Europe's DefenceTech Bottleneck: Supply Chain Issues Hamper Expansion · EU-Startups
- Berlin's Cloover Secures €86.2M Facility, Reaches Profitability · EU-Startups
- UK Man Jailed Six and a Half Years for Illegal IPTV Operation · Pplware
- Berlin's Auxxo closes Female Catalyst Fund II at €33.3M · EU-Startups
- Chinese court freezes Nexperia's stakes in four subsidiaries amid owner dispute · The Next Web
- UK government launches £100m AI start-up procurement competition · Silicon Republic
Why this matters for European digital sovereignty
Two speeds again, but with a sharper edge than usual. The AI Act delay in today's Digital Omnibus package is uncontroversial housekeeping; the GDPR personal data rewrite is not, and Austria's Supreme Court just showed why the distinction matters by enforcing a core GDPR protection on the same day Brussels' own package seeks to narrow what counts as personal data in the first place. A regulation is only as strong as the definitions underneath it, and this week those definitions are being fought over in two very different rooms: a courtroom that just enforced them, and a negotiating table that might loosen them. Meanwhile Flower Labs' Endeavor and xorlab's expansion are the kind of evidence this column keeps looking for and rarely finds: not funding badged as sovereign, but products built to actually reduce dependency on US infrastructure. Neither closes Europe's compute or infrastructure gap on its own, but both point in the direction the continent's sovereignty debate keeps saying it wants to go, which is more than the regulatory track alone can currently claim.
Sources
- London and Hamburg based Flower Labs launched its Endeavor AI model as a sovereign alternative to US giants · Tech.eu
- Italy's public administration is navigating the pacing problem between AI regulation and organisational adoption · Agenda Digitale
- The Digital Omnibus advanced its AI Act amendment while its GDPR personal data rewrite remains contested · Agenda Digitale
- German firm INLEAP Photonics raised €20 million for laser based drone defence technology · EU-Startups
- Zurich-based xorlab raised €5 million to scale sovereign email security across Europe · EU-Startups
- Revolut launched its AI assistant AIR inside its French banking app · Presse-Citron
- Austria's Supreme Court ruled CRIF illegally collected data, clearing the way for a noyb class action · noyb.eu
This daily debrief is published every evening. Source links lead to the original reporting.
European Alternatives You Might Like
Pixelfed
Pixelfed is a decentralized, open-source social media platform for sharing images. Users can upload and share photos, follow other users, and interact through likes, comments, and shares. Utilizing the ActivityPub protocol, Pixelfed allows for federation, enabling users to interact with individuals on other compatible platforms. It is designed for photographers and anyone seeking a privacy-focused, community-driven alternative to centralized image-sharing services.
Element (Matrix)
Element is a secure, decentralized communication platform built on the Matrix protocol. It allows users to send end-to-end encrypted messages, share files, and participate in group chats. Key features include voice and video calls, bridging with other communication platforms like Slack and Discord, and the ability to host your own server for enhanced privacy and control. Element is suitable for individuals, teams, and organizations seeking secure and private communication, and is particularly beneficial for those who value data sovereignty and open-source solutions.
SoundCloud
SoundCloud is a digital audio distribution platform where users can upload, promote, and share their original music and audio. Key features include music streaming, direct messaging, commenting, and the ability to follow artists and playlists. This platform is primarily used by independent musicians, DJs, and podcasters to share their work, connect with listeners, and build an audience. SoundCloud offers a vast library of user-generated content, providing access to a wide range of music and audio not always available on other streaming services.
Ecosia
Ecosia is a search engine that utilizes ad revenue to fund tree-planting initiatives. Users can perform web searches using the same technology as Bing, accessing search results, images, videos, and news. A counter displays the number of trees planted through user searches, and the company reports on its financial activities, including its impact on the environment and carbon neutrality. Ecosia's primary benefit is its commitment to environmental sustainability, appealing to users who want to support reforestation efforts while browsing the internet.