For two decades, the design grammar of social media — the bottomless feed, the video that plays itself, the notification engineered to pull you back — has been treated as a matter of product taste. Critics called it manipulative; platforms called it user experience. Today the European Commission called it something with legal consequences: a violation.
In preliminary findings issued July 10 under the Digital Services Act, the Commission concluded that the design of Facebook and Instagram is addictive by construction and that Meta failed in its legal duty to assess and mitigate the risks that design poses to users’ physical and mental wellbeing — with minors and vulnerable adults foremost among them. The investigation has run since May 2024. The potential penalty if the finding sticks: up to 6% of global annual turnover, which against Meta’s roughly $201 billion in 2025 revenue means a ceiling north of $12 billion.
The features on the charge sheet
What makes this document remarkable is its specificity. The Commission didn’t gesture at “harmful content” — it named the mechanics:
- Infinite scroll — the feed without a floor, removing every natural stopping point
- Autoplay — the next video beginning before you’ve decided to watch it
- Push notifications — engineered interruptions that reel users back
- Engagement-optimized recommender systems — algorithms tuned to maximize time spent, with formats like Reels and Stories singled out as drivers of excessive use
The Commission’s language is striking: these features shift users into “autopilot mode” — consumption that continues after intention has left the room. Anyone who has surfaced from an hour of Reels they don’t remember choosing knows precisely the state being described. What’s new is a regulator putting it in a legal finding and attaching a liability number to it.
Under the DSA, very large platforms must identify systemic risks their services create — including to mental health — and actually mitigate them. The Commission’s conclusion is that Meta did neither honestly. It found the company disregarded its own data on teenagers’ nighttime usage and on how its optimized formats drive compulsive use. The risk assessments existed; the willingness to act on what they showed did not.
The safeguards that were always theater
The finding’s most quietly damning section audits the wellness tools Meta has spent years pointing to whenever this criticism surfaced. The Commission’s verdict, feature by feature: time-management tools are trivially bypassed and produce no meaningful reduction in use. Parental controls function only for parents with the technical skill and free time to operate them — a design that structurally abandons the children of everyone else. Teen default settings are simply insufficient.
This matters beyond Meta. “We offer screen-time tools” has been the entire industry’s liability shield since roughly 2018 — the regulatory equivalent of a casino pointing to the responsible-gambling pamphlet by the door. A major regulator has now put in writing that the pamphlet doesn’t count as mitigation. Every platform running the same playbook should read that section twice.
What Brussels actually wants changed
The demanded remedies are not content moderation. They are orders about the machine itself:
- Autoplay and infinite scroll disabled by default — the feed gets a floor back, the video waits to be chosen
- Effective screen-time breaks — real interruptions, not dismissible nags
- Recommender systems adjusted to stop optimizing purely for engagement
Read that list again and notice what it is: a regulator reaching into the reward loop of the most profitable attention machine ever built and ordering its dopamine mechanics reconfigured. Not what content may be shown — how the showing works. That is a deeper intervention than any fine, and it’s why Meta will fight this with everything it has. Engagement-per-user is the denominator of Meta’s entire business; every one of these remedies lowers it by design.
“Protecting the physical and mental health of Europeans must be a priority for social media platforms,” said Commission executive vice-president Henna Virkkunen. Meta, for its part, says it disagrees with the findings and that they ignore the teen-safety measures it has already shipped — the very measures the Commission just assessed and found to be theater.
The wall, not the exception
Step back and this week acquires a shape. On Wednesday, the UK confirmed child-safety rules due later this month that would target — verbatim — infinite scrolling and addictive design, floating platform curfews for minors. The Commission’s dark-pattern enforcement has been building for years, from the CNIL’s €100 million cookie-consent fine against Google onward. And Meta is simultaneously staring down the transatlantic data-transfer collapse we covered on Monday. The era in which a platform’s engagement mechanics were nobody’s jurisdiction is visibly ending, one legal instrument at a time.
It’s worth being honest about the tension in today’s news, because readers of this blog will feel it: the same Brussels that yesterday resurrected suspicionless message scanning today ordered the world’s largest social platform to stop engineering compulsion. Neither cancels the other. The EU is capable of being wrong about encryption and right about this — and on this, the finding says out loud what the internal research at every major platform has said for a decade: the compulsion is not a side effect. It’s the product.
What happens next — and what you can do now
Procedurally: these findings are preliminary and don’t prejudge the outcome. Meta now gets access to the Commission’s file and a written reply before any non-compliance decision issues. Expect months of response, negotiation, and — if Brussels holds its line — either a redesign of the feed for 450 million Europeans or the largest DSA fine ever levied. Whatever ships in the EU will be studied everywhere, because Meta rarely builds region-locked architecture twice.
Personally: you don’t have to wait for the remedy phase. Every demanded fix has a do-it-yourself version today. Turn off autoplay where settings allow. Disable non-essential notifications — all of them; the app will still be there when you choose to open it. Set your feeds to chronological where offered, which quietly detunes the engagement optimization. And if you have teenagers, know that the Commission just confirmed what you suspected: the built-in parental controls were designed to be pointed at, not used. The regulator’s remedy list is, conveniently, also a settings checklist — Brussels just published the instruction manual for your own phone.
