This Week in ICT & Cybersecurity — Brussels (#20, 2026)
Commission fines Temu €200 million under DSA; Satellite spectrum authorisation proposal; EU Startup Scoreboard launched; CIR and ESP start dates set; Critical Raw Materials list adopted.
May 24, 2026 to May 30, 2026
Commission fines Temu €200 million under DSA; Satellite spectrum authorisation proposal; EU Startup Scoreboard launched; CIR and ESP start dates set; Critical Raw Materials list adopted.
📋 In This Week's Newsletter
• 🇪🇺 European Commission
• ⚖️ EU Legislation
• ✒️ EP Committee Work
• 📚 What We're Reading This Week
European Commission
Commission fines Temu €200 million for Digital Services Act infringement
The European Commission has imposed a €200 million fine on Temu, citing breaches of the Digital Services Act (DSA). According to the Commission, Temu failed to adequately identify and assess systemic risks associated with illegal products on its platform, and did not sufficiently analyse how recommender systems and influencer programmes amplify these risks. Evidence included mystery shopping and data from market surveillance authorities, which showed high non-compliance rates for select product categories. The Commission's decision concludes formal proceedings launched in October 2024, following risk assessment reports from Temu in 2024 and interim 2025. Temu has until 28 August 2026 to submit an action plan, as required by Article 75 DSA, after which the Board for Digital Services will review the plan before final implementation deadlines are set.
Commission proposes new authorisation for mobile satellite services in the 2 GHz band
On 26 May 2026, the European Commission adopted a proposal to authorise mobile satellite services (MSS) providers to use the harmonised 2 GHz frequency band beyond 2027. The proposal divides the spectrum between governmental use, including critical communications and security, and commercial Direct-to-Device services. It introduces an EU-level selection procedure to ensure regulatory consistency across Member States. One third of the band would be reserved for government use, managed by an EU operator integrated with the IRIS² Secure Connectivity programme. The remaining two thirds would be split equally between EU-only and EU/non-EU commercial operators. The Commission's approach aligns with the forthcoming Digital Networks Act and takes into account input from the Radio Spectrum Policy Group and consultations held in 2025.
European Startup and Scaleup Scoreboard 2026: ecosystem performance improves
The Commission published the first European Startup and Scaleup Scoreboard (ESSS) on 28 May 2026, tracking the performance of national startup ecosystems since 2020. The scoreboard shows that 20 out of 27 EU Member States improved their indicators, with Estonia, Sweden, Finland, the Netherlands, and Denmark leading in digital infrastructure, talent, and funding. The ESSS identifies gaps for 'rising' countries, including limited access to venture capital and a persistent brain drain. The analysis is based on 36 indicators and draws from Eurostat, the Joint Research Centre, and private market sources. The findings will inform upcoming legislative initiatives, including the European Innovation Act and the proposed EU Inc. corporate framework.
Commission College holds orientation debate on EU-China relations
The College of Commissioners held an orientation debate on EU-China relations on 28 May 2026, focusing on maintaining engagement while addressing challenges in the trade and investment relationship. The Commission reiterated its 'de-risking, not decoupling' approach, noting that security and economic interests are increasingly linked. The debate will inform the EU's position ahead of the June G7 and European Council meetings. The Commission underlined the need for a balanced response as it continues dialogue with China.
President von der Leyen addresses critical infrastructure and cybersecurity in Lithuania
During a visit to Vilnius on 25 May 2026, Commission President Ursula von der Leyen outlined additional EU support for the Baltic states, including €12 billion through SAFE and €1.5 billion from Cohesion policy for defence, border surveillance, and security. She referenced new projects under the European Readiness Flagships and highlighted the importance of anti-drone and cyber defence capabilities. Von der Leyen called for unified alert systems, improved cross-border coordination, and a protocol for hybrid situations involving cyberattacks and foreign interference. The visit emphasised the EU's support for critical infrastructure resilience and regional security.
EU Legislation (Official Journal)
European search portal operational start date set for 12 June 2026
Commission Implementing Decision (EU) 2026/1155, published on 29 May 2026, determines that the European search portal (ESP) will begin operations on 12 June 2026. The ESP enables Member State authorities and EU agencies to access EU information systems, Europol, and Interpol databases, pursuant to Regulations (EU) 2019/817 and 2019/818.
Common identity repository (CIR) operational start date set for 12 June 2026
Commission Implementing Decision (EU) 2026/1156, adopted on 28 May 2026, establishes 12 June 2026 as the start of operations for the CIR, as provided under Regulations (EU) 2019/817 and 2019/818. The CIR supports interoperability between EU border, visa, police, and judicial cooperation information systems.
Critical Raw Materials recovery: products and waste streams listed under new Implementing Regulation
Commission Implementing Regulation (EU) 2026/1116 of 26 May 2026 lists products, components, and waste streams considered to have relevant potential for critical raw materials recovery in line with Regulation (EU) 2024/1252. The list serves as a reference for national circularity programmes and may be updated as technologies and market conditions evolve.
EP Committee Work
EMPL and SANT adopt opinions on European Competitiveness Fund proposal
The Committee on Employment and Social Affairs (EMPL), with rapporteur Grégory Allione, and the Committee on Public Health (SANT), with rapporteur Radan Kanev, have adopted opinions on the proposal for a regulation on the European Competitiveness Fund (ECF). The ECF aims to establish a single framework for competitiveness, including defence research and innovation, and repeals several existing regulations. Both opinions address aspects relevant to research, innovation, and cross-sector competitiveness, contributing to the legislative process on this new fund.
www.europarl.europa.eu | www.europarl.europa.eu
What We're Reading This Week
- Can social media be safer? | Euronews Tech Talks podcast: Experts discuss strategies and innovations aimed at reducing risks and improving safety across major social media platforms.
- Dublin ‘can’t trust itself to do the right thing’: Why Irish EU presidency should recuse itself from regulating Big Tech: Concerns rise over Ireland's impartiality in tech regulation as calls grow for its EU presidency to step aside on Big Tech oversight.
- Irish data watchdog pushed Norwegian citizen to settle privacy case with Meta: Ireland's data protection authority encouraged a Norwegian complainant to resolve a privacy dispute with Meta through a settlement.
- AI helps hackers find flaws no scanner can catch, Google warns: Google warns that AI is enabling hackers to discover security vulnerabilities that evade traditional scanning tools.
- UK cyberspy chief calls AI 'unstoppable force' and warns about Russia: UK's top cyber official urges urgent AI safeguards, highlighting escalating Russian threats to national and global security.
