News - For Consumers

Thousands of OpenAI's agents spent weeks running loose on a dormant German wiki, and a Heise report surfaced it before an Article 55 incident filing followed. The same day, Brussels' own fix for online age checks draws exactly the privacy criticism the platforms it regulates have spent two years failing to answer.

Six days before the Cyber Resilience Act forces companies to report exploited flaws within 24 hours, Berlin found out that refusing a ransom does not stop stolen data from surfacing anyway. The same week, Europe's cloud lobby accuses Broadcom of widening a fight it started over VMware licensing into control of the enterprise AI layer.

Brussels tightened its grip on ChatGPT, Reddit and Roblox this week while quietly rewriting parts of its own privacy rulebook. Underneath the regulatory noise, Europe's sovereignty ambitions kept colliding with market realities, from Italian cloud tenders that reward US hyperscalers to Nvidia's purchase of a French AI icon.

Rome's public procurement rules for cloud services were designed to keep European capacity in the running, and instead they hand the field to American hyperscalers by default. The same day, Google's model for who gets to use its fastest vulnerability-hunting AI shows a second kind of sovereignty gap: not a rule that misfires, but one that was never written.

What this column called a rumour on 27 August has a signature now: Nvidia has confirmed it is buying Hugging Face, the French-founded hub much of Europe's open-source AI runs on, for $12. 93 billion....

The EU's General Court told Opera that Microsoft Edge isn't a gatekeeper on the same day the Commission opened a licensing probe into Oracle's cloud business, a split verdict that says more about where Brussels sees real market power than any single ruling could. Meanwhile a German spacetech raise shows sovereign infrastructure money moving at last, not just sovereign-AI branding.

The day Brussels' Digital Omnibus sends its rewrite of what counts as personal data into contested interinstitutional negotiation, Austria's Supreme Court just enforced the GDPR principle at stake against a credit agency that broke it. Meanwhile two European firms show what closing the sovereignty gap by building, rather than legislating, actually looks like.