Today in European Digital
EU member states may make AI's data grab automatically legal
Ireland's Data Protection Commission spent years proving Google broke the law on location tracking. Ireland's presidency of the EU Council, chairing Council negotiations on the Digital Omnibus across all 27 member states, is now drafting text that moves the opposite way. Leaked documents obtained by noyb describe a proposal that would make using personal data for AI training automatically lawful, pre-empting the kind of case that just produced today's fine, and handing companies what the leak calls unrestricted access to decades of data already collected. One arm of the same state spent years enforcing the old rule. Another is writing the one that replaces it.
The European Commission opened its Apply AI Summit in Brussels the same day, pushing small and mid-sized businesses past pilots and into production use of AI. The two tracks do not contradict each other so much as reveal what "adoption" actually requires: demand-side encouragement from the Commission, and a supply-side data rule loose enough that companies do not have to ask first. That is the actual site of the fight over European digital sovereignty right now, not chip factories or cloud contracts, but who gets automatic legal cover to reuse data that was collected under different rules and for different purposes.
None of this is settled. The Digital Omnibus has been through this cycle before: a Council draft in March dropped its most severe threats to GDPR and ePrivacy, only for the definition of personal data to land back in contested negotiation by the start of this month. The automatic-lawfulness clause for AI training is the sharpest version of that fight yet, and it is still just a leaked presidency text, not an agreed Council position.
Consumers…
For anyone whose phone tracked their location under Google's old settings, the 403 million euro fine is retrospective justice: the Irish DPC found the underlying practice breached GDPR's transparency and fairness principles, years after the tracking happened. If the presidency's proposal advances, the same category of data use, feeding AI training rather than ad targeting, would not need to wait for an enforcement case at all. It would be lawful from the moment the text takes effect, with no equivalent of the years-long DPC investigation behind this fine standing in the way.
Businesses…
The summit's pitch to small and mid-sized companies is adoption, not novelty: put existing models into production rather than treat them as a pilot. Businesses that take that seriously do not need to default to the American labs already selling into Europe. Aleph Alpha is built for exactly the audience Brussels was addressing today, and it exists as a working product rather than a roadmap promise.
Capital moved somewhere no negotiation text can reach, too. NATO's DIANA Capital Network added 21 European investors to its defence innovation network, and two Danish firms, Final Frontier and Myriad, merged to launch a 100 million euro fund for early-stage defence tech across the Nordics and Ukraine. Neither needed a Council compromise: European defence investment has been building since at least July, when Airbus anchored a 500 million euro fund of its own. This is sovereignty bought rather than legislated, and it is arriving faster than the Digital Omnibus is.
Government…
The European Data Protection Board finished a separate piece of the same puzzle today: final, harmonised guidance on how national authorities calculate GDPR fines and how those interact with the Digital Services Act's own corrective powers. That consistency effort has been years in the making, and it lands the same day a presidency text would narrow what some of those fines can even be issued for. Enforcement is getting more uniform exactly as the rules it enforces are being renegotiated underneath it.
Further today
- Project Ventures launches £5M fund for Imperial-rooted deeptech and AI startups · Tech.eu
- London's Metris Energy raises €4.35 million for AI platform in renewable energy · EU-Startups
- DeepL boss: Being private right now has a "lot of advantages" · Tech.eu
- Dutch Government to Implement E-Invoicing by July 2030 · Digitale Overheid
- EU to Rate Data Centers on Energy and Water Use from 2027 · The Next Web
- AI Pioneer Yann Le Cun Joins Cellular Intelligence to Revolutionize Medicine · Presse-Citron
- Estonia produces ten billion-dollar startups per 1.4 million people, outpacing the US. · Silicon Canals
- WhatsApp Business paid, the rules vacuum that weighs on businesses · Agenda Digitale
- Rust Project Warns of Malicious Job Interview Scams Targeting Contributors · The Register
- Stop AI? The real problem is governing connected agents · Agenda Digitale
- Nvidia CEO Jensen Huang dismisses AI apocalypse predictions · Pplware
- NewSchool VC closes €10M Fund I to back early-stage B2B tech · Tech.eu
- London's Unit1 Studio secures €23.3M for avatar concerts · EU-Startups
Why this matters for European digital sovereignty
What matters next is not whether the Irish Presidency text survives in its current wording, since the Digital Omnibus has already shown it can be rewritten under pressure. What matters is whether the automatic-lawfulness clause for AI training data survives into the version that goes into trilogue talks with Parliament, since that is the point after which lobbying gets more effective, not less, and redrafting gets harder. A presidency text that clears its own Council intact would mark a genuine shift in the political mood on data protection, not another round of drafting pressure producing the same softened outcome as before. Watch the Council's position in the run-up to that trilogue for whether the clause is still there.
Sources
- Leaked Irish Presidency documents would make AI training on personal data automatically lawful under the Digital Omnibus · noyb.eu
- The European Commission's Apply AI Summit in Brussels pushed SMEs and strategic industries toward real-world AI adoption · Tech.eu
- Ireland's DPC fined Google 403 million euros over unlawful location data collection since the GDPR took effect · Heise Online
- The EDPB adopted final guidelines harmonising GDPR fine methodology and its interplay with DSA corrective powers · EDPB
- NATO's DIANA Capital Network added 21 European investors to scale defence innovation · EU-Startups
- Danish VCs Final Frontier and Myriad merged to launch a 100 million euro defence tech fund · Tech.eu
This daily debrief is published every evening. Source links lead to the original reporting.
European Alternatives You Might Like
Pixelfed
Pixelfed is a decentralized, open-source social media platform for sharing images. Users can upload and share photos, follow other users, and interact through likes, comments, and shares. Utilizing the ActivityPub protocol, Pixelfed allows for federation, enabling users to interact with individuals on other compatible platforms. It is designed for photographers and anyone seeking a privacy-focused, community-driven alternative to centralized image-sharing services.
Element (Matrix)
Element is a secure, decentralized communication platform built on the Matrix protocol. It allows users to send end-to-end encrypted messages, share files, and participate in group chats. Key features include voice and video calls, bridging with other communication platforms like Slack and Discord, and the ability to host your own server for enhanced privacy and control. Element is suitable for individuals, teams, and organizations seeking secure and private communication, and is particularly beneficial for those who value data sovereignty and open-source solutions.
SoundCloud
SoundCloud is a digital audio distribution platform where users can upload, promote, and share their original music and audio. Key features include music streaming, direct messaging, commenting, and the ability to follow artists and playlists. This platform is primarily used by independent musicians, DJs, and podcasters to share their work, connect with listeners, and build an audience. SoundCloud offers a vast library of user-generated content, providing access to a wide range of music and audio not always available on other streaming services.
Ecosia
Ecosia is a search engine that utilizes ad revenue to fund tree-planting initiatives. Users can perform web searches using the same technology as Bing, accessing search results, images, videos, and news. A counter displays the number of trees planted through user searches, and the company reports on its financial activities, including its impact on the environment and carbon neutrality. Ecosia's primary benefit is its commitment to environmental sustainability, appealing to users who want to support reforestation efforts while browsing the internet.