EU Confirms Preliminary DSA Breach Against Meta, Targets Infinite Scroll and Autoplay Features Specifically

The European Commission's preliminary findings, published Friday, name infinite scroll, autoplay, push notifications, and highly personalized recommendation systems as the specific mechanisms it says drove users into what the Commission called "autopilot mode."

The Commission said Meta "did not adequately assess the risks of its addictive design on the physical and mental wellbeing of users, including minors and vulnerable adults." It also accused Meta of ignoring available data on how much time minors were spending on Instagram and Facebook at night, and how formats like Reels and Stories contributed to excessive use, according to CNBC.

What the EU Is Actually Demanding

The Commission is not just asking for better warning labels. It wants autoplay and infinite scroll disabled by default, effective screen-time breaks enforced at the platform level, and a recommender system redesigned to be less engagement-driven. These are structural product changes, not policy tweaks.

Henna Virkkunen, the EU's tech chief, told Reuters: "The next step is either that Meta changes its design or a non-compliance decision will follow." Virkkunen added that the EU has no intention of retreating: "The Digital Services Act provides a clear framework to hold platforms accountable for the addictive design and effects of their services. We are fully committed to enforcing our legislation in Europe."

Meta's Defense, Stated Fairly

Meta's position is not trivial. Spokesperson Ben Walters told Reuters that Meta disagrees with the preliminary findings, which "don't accurately take into account the significant steps we've taken to protect teens." Meta has rolled out Teen Accounts that automatically protect teens and put parents in control—allowing them to block access to Instagram at night and cap daily screen time at just 15 minutes. The company told CNBC it "shares the European Commission's commitment to providing teens with safe, positive online experiences."

The company did build parental controls. The question is whether building a tool is the same as the tool working.

The Commission's answer: no. It found that Instagram's and Facebook's time management tools, "including those activated by default for teens, can be easily dismissed and do not lead to a meaningful reduction and control of the usage of the service," according to TechCrunch. On parental controls specifically, the EC concluded they are "only effective if parents and guardians possess adequate technical expertise" and dedicate significant time to understanding them. This is a design-adequacy argument grounded in how the tools actually function rather than their existence on paper.

Second Strike This Year

This is the second time in 2026 the Commission has issued a preliminary breach finding against Meta under the DSA. In April, the Commission found Meta was failing to prevent children under 13 from accessing Facebook and Instagram. Two U.S. court rulings in March also went against Meta: one finding that platform design contributed to addiction and mental health harms in young people, the other determining Meta misled users about children's safety on its platforms, according to CNBC.

Separately, TechCrunch reported this week that four U.S. states are seeking $1.4 trillion in penalties in litigation over claims that Meta designed its platforms to addict young users and misled the public about safety. Meta disclosed that figure in a court filing.

The $1.4 trillion U.S. exposure and the EU's 6% annual turnover threat are legally separate proceedings, but they are feeding the same narrative regulators on both sides of the Atlantic are now using to build their cases.

The Unresolved Question

The core factual dispute concerns whether addictive design features cause measurable harm or whether platform use reflects user choice and parental responsibility. Preliminary findings are not final decisions. Meta retains the right to submit a formal response and dispute the evidence before the Commission issues any binding ruling.

One question remains open: whether the EU Commission will accept redesigned defaults as sufficient compliance, or whether it will demand deeper algorithmic changes that would require Meta to restructure how its recommendation systems are built, not just what settings they ship with. That distinction will determine whether a negotiated settlement is possible or whether a formal non-compliance decision and the 6% fine becomes the outcome.