Today in European Digital
EU officials targeted on WhatsApp, Europe's clocks still run on GPS
Brussels has, for the first time, officially acknowledged that senior EU officials were targeted by state backed spearphishing campaigns run over WhatsApp, attributing the attacks directly to foreign governments, an internal document revealed by The Next Web shows. That an EU authority is now confirming and attributing these attacks on the record, rather than treating them as an unspoken risk, is itself the story.
The same week, Agenda Digitale lays out a less dramatic but arguably deeper version of the same weakness. Precise time, the kind that underwrites cybersecurity, finance and energy grids, still relies heavily on GPS. Europe is only beginning to build out terrestrial and internet exchange based alternatives that would reduce that single point of dependency and the geopolitical risk that comes with it.
Sovereignty on paper does not survive contact with a chat app you do not own.
Put the two items side by side and a pattern this desk has tracked for weeks sharpens: European digital sovereignty is a two speed problem. The regulatory half, GDPR enforcement, the DMA, the AI Act, keeps landing real blows on the platforms it targets. The infrastructural half, the pipes, satellites and default apps that European institutions actually run on, is barely being rebuilt. Officials typing on WhatsApp and grids syncing to GPS are not separate failures. They are the same failure, showing up in a chat log and in a clock.
Consumers…
The digital euro moved a step closer today, with BEUC publishing its expectations for the trilogue negotiations: a public payment method that behaves like digital cash, usable everywhere in the euro area without a bank's product roadmap deciding otherwise. Whatever shape it takes, that is a different animal from Revolut's newly launched euro backed stablecoin EURR, rolling out first in Denmark, Poland and Portugal before a wider European Economic Area release.
Both are framed as answers to the same problem, dollar denominated payment rails dominating European transactions, but they are not the same tool. One is public money being negotiated by elected institutions; the other is a private company's product, however useful. Readers who want a euro that is not quietly a dollar substitute should watch which one Brussels actually finishes.
Businesses…
Reform UK's pledge to scrap the UK's GDPR for a "light touch" regime modelled on New Zealand, reported by The Register, is a domestic British platform promise with a very European consequence: it risks the adequacy decision that lets personal data move between the UK and the EU without extra paperwork. Any business routing customer or employee data through UK entities should treat this as a live risk to plan around, not a rhetorical flourish from an opposition party.
Government…
For public bodies, today's lesson is practical. If foreign governments are phishing officials through WhatsApp, agencies handling anything sensitive have a case for moving those conversations to platforms under their own institutional control, Switzerland's Threema or France's Olvid both fit the brief without routing traffic through Meta's infrastructure. The same logic applies to time. A GNSS disruption would not just annoy phone users, it would hit exactly the finance and energy systems Agenda Digitale flags, which makes sovereign terrestrial timing a genuine resilience investment rather than a nice to have.
Further today
- A roundup of ten European EdTech startups building AI tutoring and screen free learning tools · EU-Startups
- London founded Stability AI raises $76 million from Warner and Sony Music for its entertainment focused AI products · Tech.eu
- The EU's mandatory Verification of Payee rule pushes businesses, especially SMEs, to clean up payment data governance · Agenda Digitale
- A survey finds 45 percent of German firms still unfamiliar with Cyber Resilience Act vulnerability reporting duties · Heise Online
- Meta secures final urban planning approval for a 1 billion euro data centre in Talavera, Spain · Xataka
- Einride's founders launch Navisalma, a venture firm targeting 450 million euros for European deep tech · Tech.eu
- noyb sends German credit agency SCHUFA a cease and desist letter over a 'shadow database' of withheld historical data · noyb.eu
- UK founded livestock tech platform Breedr raises 23 million euros for global expansion · EU-Startups
Why this matters for European digital sovereignty
Today's items show European digital sovereignty splitting into a fast regulatory track and a slow infrastructural one. Brussels can legislate a digital euro or fine a platform, but it cannot legislate away the fact that its own officials communicate over WhatsApp or that the timing signal finance and energy systems run on still leans on GPS. The Reform UK move adds a third front: even the regulatory gains are not fixed, since the UK's adequacy status, and the frictionless data flows EU businesses rely on, depends on London keeping rules close enough to Brussels' own. None of this is fixed by better wording in a directive. It requires building and actually using the European alternatives, audited messaging apps, terrestrial timing infrastructure, a genuinely public digital euro, that today's items show still sit on the margins rather than in daily use.
Sources
- First official EU acknowledgement that senior officials were targeted by state backed WhatsApp spearphishing · The Next Web
- Why Europe's reliance on GPS for precise time is a critical infrastructure gap · Agenda Digitale
- Consumer group BEUC's recommendations for the digital euro trilogue negotiations · BEUC
- Revolut begins rolling out its euro backed stablecoin EURR · Silicon Republic
- Reform UK proposes scrapping UK GDPR for a lighter touch regime · The Register
This daily debrief is published every evening. Source links lead to the original reporting.
European Alternatives You Might Like
Pixelfed
Pixelfed is a decentralized, open-source social media platform for sharing images. Users can upload and share photos, follow other users, and interact through likes, comments, and shares. Utilizing the ActivityPub protocol, Pixelfed allows for federation, enabling users to interact with individuals on other compatible platforms. It is designed for photographers and anyone seeking a privacy-focused, community-driven alternative to centralized image-sharing services.
Element (Matrix)
Element is a secure, decentralized communication platform built on the Matrix protocol. It allows users to send end-to-end encrypted messages, share files, and participate in group chats. Key features include voice and video calls, bridging with other communication platforms like Slack and Discord, and the ability to host your own server for enhanced privacy and control. Element is suitable for individuals, teams, and organizations seeking secure and private communication, and is particularly beneficial for those who value data sovereignty and open-source solutions.
SoundCloud
SoundCloud is a digital audio distribution platform where users can upload, promote, and share their original music and audio. Key features include music streaming, direct messaging, commenting, and the ability to follow artists and playlists. This platform is primarily used by independent musicians, DJs, and podcasters to share their work, connect with listeners, and build an audience. SoundCloud offers a vast library of user-generated content, providing access to a wide range of music and audio not always available on other streaming services.
Ecosia
Ecosia is a search engine that utilizes ad revenue to fund tree-planting initiatives. Users can perform web searches using the same technology as Bing, accessing search results, images, videos, and news. A counter displays the number of trees planted through user searches, and the company reports on its financial activities, including its impact on the environment and carbon neutrality. Ecosia's primary benefit is its commitment to environmental sustainability, appealing to users who want to support reforestation efforts while browsing the internet.