Meta's Infinite Scroll Breaks EU Law, Commission Finds

You know the feeling: you open Instagram to check one notification, and forty minutes later you're still scrolling, no memory of the last twenty posts. That's not a personal failing. On July 10, 2026, the European Commission said, in effect, that it's a legal violation—and it could cost Meta up to $12 billion.

Key Takeaways

• The European Commission preliminarily found on July 10, 2026 that Meta breached the Digital Services Act by using infinite scroll, autoplay, push notifications, and highly personalized recommendation algorithms on Facebook and Instagram without properly assessing the harm to users' mental health.
• Meta faces a potential fine of up to 6% of its global annual turnover—roughly $12 billion—if the Commission's findings are confirmed.
• Regulators singled out Meta's existing time management tools as ineffective, noting they "can be easily dismissed" and don't meaningfully cut usage, especially nighttime use by minors.
• This is Meta's second DSA violation finding in 2026, following an April 2026 finding that it failed to keep users under 13 off its platforms.
• The finding is preliminary: Meta now gets to review the evidence and respond before the Commission issues a final ruling, with no set deadline.

How Did We Get Here?

The Digital Services Act, the EU's flagship platform accountability law, requires "very large online platforms" like Facebook and Instagram to identify and mitigate "systemic risks" their design poses to users, under Articles 34 and 35 of Regulation (EU) 2022/2065. Those risks explicitly include harm to physical and mental wellbeing—not just illegal content or election interference, which is what most people assume the DSA polices.

Brussels has been building toward this. In May 2026, the Commission fined Temu €200 million for dark pattern manipulation under the same law, and a broader EU effort—the Digital Fairness Act—is separately targeting manipulative interface design across the bloc. Meta itself isn't new to this file: in April 2026 the Commission already found the company in breach for failing to stop users under 13 from accessing its platforms. The addictive design finding is the second Meta DSA violation this year, and unlike the age verification case, it goes after the core product mechanics—the feed itself.

What Did the EU Find About Meta's Design?

The Commission concluded that Meta failed to properly assess or mitigate the risks its design choices pose to users, particularly minors and vulnerable adults. According to the official Commission announcement, four features are named directly: infinite scroll, autoplay video, push notifications, and recommendation algorithms tuned for maximum engagement. Reels and Stories were flagged as amplifying the same pattern.

Regulators didn't stop at naming the features—they went after Meta's own countermeasures. The Commission states that Instagram's and Facebook's time management tools "can be easily dismissed and do not lead to meaningful reduction" of usage, and that Meta ignored evidence of excessive nighttime use among minors. EU Commissioner Henna Virkkunen put it bluntly: "Protecting the physical and mental health of Europeans must be a priority for social media platforms. The Digital Services Act provides a clear framework to hold platforms accountable for the addictive design and effects of their services."

What Counts as "Addictive Design" Under the DSA?

Legally, "addictive design" isn't a vibe—it's a specific failure to comply with a risk assessment obligation. Under DSA Articles 34 and 35, very large platforms must document how their design and recommender systems could harm users, then take real mitigating action if they do. The Commission's theory here is that Meta's engagement mechanics—the absence of natural stopping cues that older, non algorithmic feeds preserved—created a foreseeable risk to wellbeing that Meta knew about and didn't meaningfully address.

That distinction matters for how the case will be argued. Meta isn't accused of building a secretly harmful product; it's accused of skipping the assess and fix cycle the law requires once harm becomes evident. It's a process violation with product level consequences, which is exactly the kind of case the DSA's systemic risk framework was built to bring—and precisely why researchers watching platform accountability are treating it as a bellwether case, not an isolated action.

How Big Could the Fine Be?

Up to 6% of Meta's total global annual turnover—a figure that would land somewhere near $12 billion at Meta's current scale, dwarfing the €200 million Temu fine from two months earlier. That comparison alone tells you something: Temu's penalty was for manipulative sales tactics on a subset of its EU userbase; a Meta fine at the maximum rate would be over 50 times larger, reflecting both Meta's revenue base and the severity Brussels is assigning to platform wide design harm rather than isolated features.

The Commission also outlined what it wants fixed, regardless of the final fine number: autoplay and infinite scroll off by default, screen time breaks that can't just be tapped away, and recommendation systems tuned down from pure engagement optimization. If adopted, those changes would reshape the core interaction model of two of the world's largest apps—not just add a settings toggle.

Why Email Users Should Care

Infinite scroll and email tracking pixels look like unrelated problems, but they share an engine: design built to act on you before you've consented to it. Meta's own reengagement strategy doesn't stop at the app—the same behavioral triggers regulators flagged in the feed (FOMO, urgency, personalization) show up in the "you have new notifications" and weekly digest emails Meta sends to pull you back in. Those inbox nudges are functionally an extension of the addictive design loop the DSA is now scrutinizing.

This is also the same regulatory muscle that's increasingly being pointed at email marketing. The EU's broader dark patterns push already covers manipulative consent flows in email marketing, and the underlying legal question—did this company engineer an experience to override your judgment rather than earn your attention honestly—is identical whether the surface is a social feed or an inbox. Readers who care about one should expect scrutiny of the other to intensify.

What Happens Next?

Nothing is final yet. Meta has the opportunity to review the Commission's evidence and submit a formal response before Brussels issues a binding decision—a process that, in past DSA cases, has taken months. If the Commission confirms its preliminary findings, Meta would need to negotiate a compliance plan or face the fine, and likely both, as it did after the under 13 finding earlier this year.

Watch for two things: whether Meta ships any interface changes in the EU before a final ruling forces its hand, and whether this becomes the template other regulators borrow. California, the UK, and Australia have all floated their own addictive design theories against social platforms; a confirmed EU finding with a real fine attached would hand them a tested legal blueprint.

The Bigger Picture

Regulators spent years focused on what platforms collect. This case is about what platforms do to keep you looking—a harder thing to fix with a settings menu, because the business model depends on it working. Whether it's an infinite feed engineered to never end or an inbox flooded with tracking pixels engineered to report back on you, the common thread is design built to operate without asking first. The EU just put a price on one version of that. Expect the conversation about the other to get louder.