On July 10, the European Commission dropped a regulatory bomb: Meta’s Facebook and Instagram are designed to be addictive, and that could cost the company billions. The preliminary finding, part of the Digital Services Act (DSA) enforcement, targets infinite scroll, autoplay, push notifications, and hyper-personalized recommendation systems—the very mechanics that keep users glued to their screens.
What Just Happened
The Commission concluded that Meta failed to properly assess the risks these features pose to users’ physical and mental well-being, particularly for minors and vulnerable adults. It also found that safeguards already offered by the company—such as time management tools and Instagram Teen Accounts—have not effectively addressed those risks. Evidence shows that the tools can be easily dismissed and do not lead to a meaningful reduction in usage, the Commission said.
If the findings are confirmed after Meta’s formal response, the company could face a fine of up to 6% of its global annual turnover. More consequentially, the Commission can require corrective measures: disabling autoplay and infinite scroll by default, introducing mandatory screen-time breaks, and modifying recommendation algorithms to be less focused on engagement.
Meta disputes the assessment, saying the Commission ignored protections like Instagram Teen Accounts. The company will have the opportunity to inspect the case and respond before any final decision. This marks the second time this year the EU has found Meta in contravention of its laws—in April, regulators said Meta failed to prevent children under 13 from using its platforms.
TikTok is already in a similar bind. On February 6, 2026, the Commission preliminarily found the platform’s design in breach of the DSA, criticizing the same combination of continuous content delivery, autoplay, notifications, and intensive personalization. Regulators said TikTok had disregarded possible indicators of compulsive use, including how often people opened the app and how long minors used it at night. TikTok’s screen-time prompts were deemed too easy to dismiss, and parental controls were found potentially ineffective because they placed the burden on parents rather than changing the platform’s default design. TikTok has rejected the findings as “false and without merit.” If confirmed, it too faces fines and forced redesigns.
What It Means for You
The immediate impact falls on smartphone apps, but since Facebook and Instagram are also accessed via Windows browsers and the Microsoft Store, any redesign will eventually reach your PC. More importantly, the EU’s broader plans could change how Windows handles age verification and parental controls.
For Parents and Families
The Commission wants platforms to be safe by design, not reliant on parents to figure out settings. A high-level expert report delivered on July 13 recommended an EU-wide restriction on access to “social media+” for children under 13 until providers can prove their services are safe. Commission President Ursula von der Leyen endorsed a phased-access model: supervised, time-limited use for under-13s, gradually expanding for teens. This means your child’s Instagram or Facebook experience might get much stricter by default—limited scrolling, no autoplay, less aggressive notifications—across all devices, including Windows laptops and tablets.
For IT Administrators
The EU is developing an age-verification application that would let people prove an age category without sharing their full identity with every platform. This could reduce the need to upload sensitive documents directly to Meta or TikTok. However, the implementation details will matter for Windows environments. Age assurance could be performed by individual websites, mobile apps, identity providers, browsers, or operating systems. A reusable credential might offer a cleaner experience but would need strong protections against tracking and theft.
Microsoft and other platform vendors may become part of the enforcement chain. Windows already provides family controls, account identity, and application restrictions, but an EU age regime could create demand for standardized signals that browsers and apps can consume without exposing a user’s exact birth date. Enterprise IT may encounter edge cases: shared PCs, schools, libraries, and managed devices don’t map neatly onto consumer family accounts, and browser-based access can bypass restrictions applied only to installed apps. Admins should start planning for possible new compliance requirements.
For Everyday Users
You might soon see “take a break” prompts that you can’t swipe away, or your feed could stop loading after a set time. Some may welcome the nudge; others may find it annoying. The key is that these changes won’t be optional if the EU has its way. The Commission is not merely asking for better warning messages—it is challenging the mechanics that keep users consuming content without making a new decision after each item.
How We Got Here
The DSA, in force since 2024, gives the EU power to regulate online platforms’ systemic risks. This crackdown escalated quickly: after the TikTok preliminary finding in February, the April ruling on Meta’s age-check failures, and now the broader design complaint. On July 13, the Commission’s Special Panel on Child Safety Online released a report that expands the scope to “social media+”—a catch-all that could encompass video games, messaging platforms, and AI chatbots that use similar engagement loops. The determining factor would be the product’s features and risks, not the category selected in an app store.
Von der Leyen framed the issue as product safety rather than solely parental responsibility, comparing it to car safety: manufacturers are expected to build safe vehicles, not expect families to design seatbelts themselves. That argument points toward default restrictions built into the service, not settings buried in a family dashboard.
What to Do Now
For regular users, there’s no immediate action required—Meta and TikTok have months to respond, and final decisions likely won’t come until late 2026. But you can already explore built-in Windows tools to limit screen time (Settings > Accounts > Family) and review privacy settings on social apps. Parents should keep an eye on existing protections like Instagram Teen Accounts and TikTok Family Pairing, even if the EU considers them insufficient.
For IT professionals, now is the time to start conversations about age assurance. If the EU’s plan advances, Windows might need to support a zero-knowledge age proof token. That could affect how you deploy and manage devices in schools or businesses with public access. Stay tuned to Microsoft’s compliance updates and the Commission’s autumn proposal.
Outlook
The next milestone is the autumn 2026 legislative draft. If it survives lobbying, a new wave of design obligations could reshape not just social media but any app that thrives on attention. For Windows users, the line between OS and regulation will blur—and that’s likely a good thing if it means fewer addictive apps and clearer safety defaults.