The European Commission unveiled its EU Kids Act on Thursday (17 September), proposing sweeping restrictions on children’s access to social media and new obligations on technology companies to address growing concerns over young people’s mental health and online safety.
The proposal would prevent children under 13 from accessing social media, while 13- and 14-year-olds could use restricted “mini accounts” under parental supervision. From the age of 15, teenagers would be able to open their own social media accounts. The legislation also requires platforms to prove their services are safe for minors, reversing the burden of proof from regulators to technology companies....
Europe has plenty of world-class research, talent and creativity. However, too often ideas originating in Europe are turned into economic success by others, elsewhere. This is because European innovators face barriers here and find it difficult to bring their ideas to life. As a result, the Commission proposed a new European innovation act to help Europe's most innovative ideas be developed, financed and scaled up in Europe.
To strengthen the EU innovation system, the proposal will address two main challenges. Firstly, it will help innovative companies access financing by
promoting a common EU framework to value intellectual property
creating a digital marketplace connecting buyers and sellers of intellectual property
offering expert support to help companies bring their ideas to the market
This can unlock €10.2 billion per year in additional financing and generate around €35 million in administrative cost savings.
Second, it will establish a common approach for research and development procurement that
will provide greater legal certainty
help new technologies reach the market faster
make it easier for public buyers from different EU countries to jointly carry out Research and Development procurements.
With this, companies could expect €25.92 billion in additional annual profits, while public buyers could save €1 billion per year.
The European innovation act is an element of thecompetitiveness compass, to strengthen the EU's long-term competitiveness, prosperity and technological sovereignty. In parallel, the Commission will help innovators accelerate the transformation of innovative ideas into market solutions through a specific proposal on regulatory sandboxes.
Hardware and software products are increasingly exposed to cyberattacks. From baby monitors and smartwatches to apps and computer programmes, products with digital elements are part of our daily lives. The Cyber Resilience Act (CRA) strengthens the cybersecurity of these products and better protects consumers and businesses from cyber threats.
As of 11 September 2026, manufacturers must reportanyactively exploited vulnerabilities and severe incidents that have an impact on the security of their products. They must submit an early warning within 24 hours, followed by a full notification within 72 hours. A final report must then be submitted no later than 14 days after a corrective or mitigating measure is available for an actively exploited vulnerability, and within 1 month for a severe incident.
In practice, this means consumers can rely on faster notifications and stronger protection for their connected devices, such as door locking systems, keeping their home safe and secure in the event of a cyberattack.
The reporting obligations apply to all products with digital elements made available in the EU, including those already on the market. Manufacturers will submit their notifications through the CRA Single Reporting Platform, established and maintained by the European Union Agency for Cybersecurity.
The Commission published practical guidanceto help manufacturers, developers, and businesses meet their obligations. National market surveillance authorities will ensure enforcement of the rules.
The Cyber Resilience Act builds on the EU cybersecurity strategy and the EU security union strategy. It aims to strengthen the EU approach to cybersecurity. The new rules require products with digital elements to be designed, updated, and maintained to protect users from security risks. TheCE marking will help them identify products that comply with the CRA requirements.
The main obligations introduced by the Act will apply from 11 December 2027, while the reporting obligations apply from 11 September 2026.
The three co-rapporteurs, including Renew Europe’s Christophe Grudler (ITRE), outline the priorities in Parliament’s draft report on the Industrial Accelerating Act, (IAA), as they finished their draft report this week. For Liberals and Democrats, the IAA report is seen as pivotal in boosting EU competitiveness and industrial resilience as a response to mounting global insecurity. During the drafting process, MEP Grudler has ensured that European taxpayer money prioritises businesses, jobs, and innovation in the EU, marking a pivotal shift in the EU’s approach to public procurement and economic sovereignty.
Key measures include: - Raising the threshold for Made in Europe and low-carbon products in strategic sectors to 50 percent by 2036, ensuring that public funds support domestic industries and sustainability. - Expanding strategic materials to include plastic for construction, in addition to steel, aluminium, and cement. - Increasing EU content in net-zero technologies, such as wind turbines, solar panels, heat pumps, and nuclear power plants, to strengthen Europe’s industrial capacity and leadership in the green transition.
The era of unconditional openness is over. Renew Europe is pushing for true reciprocity, ensuring that European markets open only to countries that effectively do so in the same conditions. To ensure fairness and prevent loopholes, clear safeguards, including stricter definitions and component requirements that will close the door on circumvention and guarantee that public funds truly benefit European industries, are also introduced.
Christophe Grudler, co-rapporteur on behalf of the Committee on Industry, Research and Energy (ITRE), said: “It is time to put an end to a wait-and-see approach and a certain naivety. Facing fierce global competition, we must build and consolidate the value chains of our strategic sectors in Europe: from steel and aluminium to the automotive industry and clean technologies. European taxpayers’ money must be used as a lever to achieve this: to support those who produce, innovate and create jobs here, within the Union. But greater ambition must not mean greater complexity. We are proposing simple, clear and applicable rules, without unnecessary administrative burdens for businesses and local authorities. This is the ambition we are setting out in this draft report. The work begins now: I will fight to ensure that the Accelerator rises to the challenge of the current industrial emergency.”
The European Commission calls it the Affordable Housing Act and says it can “truly bring a change in people’s lives”. But how much will it actually do to make housing more affordable, asks Catherine Feore?
The tension at the heart of the proposal is that Brussels is making ambitious claims about tackling the housing crisis while simultaneously making clear that it is not imposing new housing policies on governments or cities.
Commission President Ursula von der Leyen says the measure fulfils a promise to tackle housing affordability, describing it as “one step in this direction” and declaring: “Today, we are delivering for all Europeans.” Housing Commissioner Dan Jørgensen went further, saying the Act gives governments and cities tools to “make more affordable homes available”.
Yet the proposed legislation itself is considerably more cautious. The Commission acknowledges that insufficient housing supply is the structural cause of the affordability crisis. Short-term rentals, second homes and other non-primary uses are not the root problem, although they can exacerbate shortages and push up prices in already constrained markets.
Housing stress test
The Act principally delivers a common legal framework for authorities that choose to intervene.
Central to this is a new EU test for housing stress. An area would normally qualify where an average home costs at least eight years of disposable per-capita income, that ratio has increased over the previous decade, and pressures are unlikely to ease over the next three years. At a ratio of ten or more, the historical deterioration test is dropped. Population dynamics, housing supply and demand must also be assessed.
Authorities could then restrict short-term rentals outside a host’s primary residence or tackle second homes, prolonged vacancy and certain other non-primary uses. But there is no obligation. They must also demonstrate that the activity has significantly harmed housing affordability or availability for at least three years, and any restriction must be targeted, necessary and proportionate. This seems to set a high bar of evidence for most local authorities.
Currently, local authorities must notify the Commission of short-term rental restrictions under the Services Directive. That notification requirement will no longer be required. Cities can use the new framework without seeking prior Commission approval, although measures must be published and remain open to legal challenge. Officials argue this will remove a burdensome procedure and make intervention easier.
But the Commission is equally explicit about what it is not doing. The Act does not regulate rents, harmonise housing policy, give Brussels new housing competences, dictate taxation, inheritance or planning, or require, recommend or encourage authorities to impose restrictions. Housing policy choices “remain national, regional and local”.
Executive Vice-President Teresa Ribera says that when markets fail to provide affordable homes, “public authorities have a responsibility to act”. But the Act does not compel that action; it provides a stronger legal framework if authorities choose to act independently.
Its impact could be real in tourist hotspots where non-primary housing use is demonstrably worsening shortages. But it cannot itself build a home or lower a rent. The question is whether a clearer legal toolbox matches the expectations created by the Commission’s promise to tackle Europe’s housing crisis. When asked to quantify how much of a difference the new provisions could make, the Commission couldn’t give precise figures, saying that it would depend on the measures adopted.
MEPs are pushing for an EU solidarity mechanism to help patients pay for treatment abroad, arguing that financial barriers are preventing Europeans from exercising rights they have had on paper for more than a decade.
The calls came as Parliament discussed a report commissioned to inform its own-initiative report on modernising patients’ rights in cross-border healthcare. The study found that cross-border care accounts for just 0.004% of EU public health expenditure, despite patients continuing to face upfront costs, complex reimbursement procedures and prior-authorisation requirements.
Tomislav Sokol (EPP, Croatia) called the proposed solidarity mechanism a potential “game changer” for vulnerable patients, but challenged Parliament to spell out how it would work.
“How would it work in practice? How would it be financed? Would this be part of the EU budget?” Sokol asked. “We need to know it now, so that we can also use this in negotiations on the future EU budget, in the next MFF.”
Brussels is tightening its grip on some of the internet’s fastest-growing services, designating ChatGPT, Reddit and Roblox for heightened scrutiny under the European Union’s Digital Services Act (DSA),writes Catherine Feore.
The European Commission said all three services meet the 45 million average monthly users threshold in the EU, triggering the DSA rules reserved for digital players considered large enough to pose systemic risks to European society.
“These new designations mean that ChatGPT, Reddit and Roblox will now be held to a higher standard of scrutiny and accountability in the European Union,” said Henna Virkkunen (pictured), the Commission’s executive vice-president for tech sovereignty, security and democracy.
The move puts the companies firmly in Brussels’ regulatory crosshairs. They must assess and mitigate risks ranging from illegal content and harm to minors to threats to fundamental rights, elections, public security, and users’ physical and mental well-being. Importantly, the designation also gives the Commission investigative powers to scrutinise relevant features and systems underpinning the services.
ChatGPT has been designated a Very Large Online Search Engine (VLOSE), while Reddit and Roblox are now Very Large Online Platforms (VLOPs). They have until the end of January 2027 to comply with the DSA’s tougher obligations.
ChatGPT’s inclusion is particularly significant. The Commission considers the AI service a hybrid product that qualifies as an online search engine because it can search the web when answering users’ queries, bringing a major generative AI service into the DSA’s toughest tier of oversight for the first time.
The Commission will supervise compliance with the DSA, in cooperation with Coimisiún na Meán (Ireland’s media regulator) for ChatGPT and Reddit, and the Dutch Authority for Consumers and Markets (ACM) for Roblox.
With the latest additions, 28 platforms and search engines have now received the EU’s “very large” designation.
Stellen wir uns mal folgendes vor: In einem Land wie Georgien, dessen aktuelle Regierung der EU und der Bundesregierung nicht gefällt, würde die Regierung NGOs mit Millionen finanzieren und diese NGOs würden dann bei Wahlen über mit ihnen verbundene Organisationen eine teure Kampagne mit Wahlaufrufen zugunsten der Regierungsparteien finanzieren. Und die Regierung würde auf Nachfragen […]
The European Union is bringing out the big guns in the face of widespread outrage over the use of Artificial Intelligence (AI) violating people’s privacy and dignity.
Brussels is considering the possibility of classifying the creation of sexual deepfakes as a prohibited practice under the Artificial Intelligence Act following the scandal involving sexualised images created by Grok AI, the chatbot integrated into Elon Musk’s X platform.
Grok outrage
Musk’s company xAI – after prolonged international criticism – has introduced new restrictions in mid-January on sexually suggestive AI-generated images in Grok. The move follows criticism that Grok allowed users to digitally replace women’s clothing with bikinis and, in some cases, create sexualised depictions of minors.
The first images of people being stripped naked without consent (“nudification”) began circulating in the days following the release of the feature, but their spread increased particularly around New Year’s Eve. According to CNN, between January 5 and 6 alone, Grok was used to generate at least 6,700 sexual images. These often involved women or minors.
“Grok is now offering a ‘spicy mode’ showing explicit sexual content with some output generated with childlike images. This is not spicy. This is illegal. This is appalling,” EU digital affairs spokesman Thomas Regnier told reporters back then.
The European Commission, which acts as the bloc’s digital watchdog, said it would take note of new measures taken by X and would review them. Officials warned that if the steps prove insufficient, the EU will consider using the full scope of its Digital Services Act (DSA).
European Commission Vice-President Henna Virkkunen has stated that the Commission is considering explicitly banning these types of AI-generated sexual images under the AI Act, classifying them as unacceptable risks.
The prohibition of harmful practices in the field of AI could be relevant to addressing the issue of non-consensual sexual deepfakes and child pornography, said Virkkunen, who is also the responsible commissioner for Tech Sovereignty, Security and Democracy, at this week’s plenary session of the European Parliament in Strasbourg. She also said the DSA mitigated the risk of online sexual material being disseminated without consent.
She also recalled that the Commission had sent a request for information to X regarding Grok as part of its investigation into the platform under the DSA.
The platform was asked to preserve all internal documents and data relating to it until the end of the year. “We are now examining the extent to which X may in any case be in breach of the DSA and will not hesitate to take further action if the evidence suggests it,” she said.
The Commission had previously stepped up pressure on X, which was fined 120 million Euro in early December over transparency violations. The EU has insisted it will enforce its rules despite causing backlash from the US administration.
“The DSA is very clear in Europe. All platforms have to get their own house in order, because what they’re generating here is unacceptable, and compliance with EU law is not an option. It’s an obligation,” Regnier said at the height of the scandal in early January.
Last week, a group of about 50 MEPs had called on the Commission to ban artificial intelligence apps used to create nude images from the EU market.
Illustration: 12 July 2025: In this photo illustration, the xAI Grok logo is seen displayed on a smartphone screen. Grok is a generative artificial intelligence chatbot developed by xAI. Photo: Algi Febri Sugita/ZUMA Press Wire/dpa
Can’t live without X
Despite criticism of X, nearly all senior EU officials continue to post there rather than on European alternatives, according to research by dpa.
European Commission President Ursula von der Leyen and other top officials still do not have official accounts on Mastodon, a Germany-based alternative. Virkkunen opened an official Mastodon account in January. High-ranking EU politicians are also active on Bluesky, another US-based platform currently gaining traction.
The Commission justifies continued use of X due to its reach: Mastodon has roughly 750,000 monthly users, compared with 100 million on X, according to the companies.
The long legal path towards better safety online
The path towards protection of minors in the EU is long-winded as concerns of privacy, business and protection clash. Several regulations intersect:
Chat Control
The Commission in 2022 proposed a regulation to require platforms to detect and report images and videos of abuse (child sexual abuse material or CSAM), as well as attempts by predators to contact minors.
The final legislation is expected to be negotiated in early 2026, aiming to bridge the gap between Parliament’s privacy-focused approach and the EU Council’s desire for broad voluntary scanning powers.
While extending temporary voluntary scanning measures until April 2026 to avoid a legal vacuum, MEPs have expressed urgency for a permanent solution.
October 9, 2025, Berlin: Members of the alliance “Stop Chat Control!” demonstrate in front of the Federal Ministry of the Interior. Civil society organizations demonstrate in front of the Federal Ministry of the Interior in Berlin against the planned EU-wide chat control and hand over more than 300,000 signatures. Photo: Fabian Sommer/dpa
DSA
The European Union uses the Digital Services Act to sanction online platforms by imposing massive fines, requiring immediate operational changes, and – as a last resort – temporarily suspending their services. It can apply fines if platforms violate DSA obligations, fail to comply with interim measures or breach commitments.
It is an EU regulation for a safer online world, requiring platforms to tackle illegal content, protect users, and increase transparency.
AI Act
The AI Act was adopted in 2024 and is the world’s first and only comprehensive legal framework in the artificial intelligence context. It establishes a risk-based system to regulate AI technologies within the EU, aiming to ensure they are safe, trustworthy, and respect fundamental rights while fostering innovation.
It bans certain unacceptable AI practices, such as social scoring, and sets rules for areas of high risk for AI use – like in critical infrastructure or employment. It also sets out restrictions on manipulative AI uses such as deepfakes targeting children, among others.
Social media bans
France, which is considering banning social media for children under 15, has been testing an age verification app developed by the European Commission since this summer. This tool is one of several methods used to verify the age of internet users, which is a headache for tech giants and authorities alike.
Individual efforts
The Spanish Minister of Youth and Children, Sira Rego, in early January asked the attorney general’s office to investigate whether Grok may be committing crimes related to the dissemination of child sexual abuse material.
Currently, Spain is developing its own law for the protection of minors in digital environments. The law strengthens the framework for protecting personal integrity and privacy against new forms of violation linked to the use of technologies such as artificial intelligence, reaffirming that the best interests of the child must always prevail over any digital business model.
Bulgaria has stepped up efforts to combat online child sexual abuse through international law enforcement cooperation, national prevention campaigns and policy discussions aligned with EU legislation. In 2025, Bulgarian authorities took part in a major international operation that shut down Kidflix, one of the world’s largest platforms for child sexual exploitation, used between 2022 and 2025 by nearly 2 million users.
Romania has legislative mechanisms in place to combat child sexual abuse material through its criminal code, and the authorities are seeking to expand and modernise these rules.
Since 2025 an important bill on the protection of children online (called the Online Age of Majority Law) has been under parliamentary debate, and Romania is also gradually participating in and implementing EU rules on the prevention and combating of online sexual abuse. The Online Age of Majority Law introduces mandatory age verification and parental consent for minors (under 16) to access online services such as social media, gaming and streaming platforms.
EU candidate country Bosnia and Herzegovina still has no specific law regulating this area. In BiH, criminal liability for the production, distribution and possession of such material is based on criminal laws that cover the sexual exploitation of children, but do not contain explicit provisions on AI-generated or simulated content.
The EU has put into place a set of complementary tools and measures to protect its citizens – young and old – from harmful practices online, but weak points include challenges in enforcement, algorithmic amplification of harm, inconsistent national implementation, and debates over balancing security with privacy.
This article is an ENR Key Story. The content is based on information published by ENR participating agencies.
Login
