Live threats
HighClaude Dispatch Flaw Enables Browser Extension RCE on Host OS BreachBrenner Base Tunnel SE Confirms Data Breach; Extortion Group Claims 812 GB Stolen Rule changeOPM proposes to modify OPM/Central-21 system of records and rename employee survey DeadlineNARA proposes revisions to System of Records NARA 44 for reasonable accommodation requests CriticalCISA Adds SonicWall SonicOS SSLVPN Flaw to Known Exploited Vulnerabilities Catalog, Flagging Active Threat BreachIris Ohyama Cloud Service Breach Exposes Personal Data of 7.7 Million Customers Rule changeFinCEN withdraws proposed rule to lower cross‑border funds‑transfer reporting thresholds CriticalAlpine Linux OpenSSH Authentication Bypass (CVE‑2026‑123158) Allows Immediate Server Takeover
Updated 07:35 UTC All intelligence →
REGULATORY WATCH BRIEF Moderate 54 ⚖️ Enforcement Action announced

Commission preliminarily finds TikTok’s ‘For You’ feed breaches DSA over harmful ‘rabbit hole’ effect

The finding signals heightened regulatory scrutiny of algorithmic recommendation systems under the EU’s DSA, with potential obligations for large online platforms.

ImpactModerate 54
Type⚖️ Enforcement Action
Statusannounced not law
JurisdictionEU

What happened

The European Commission has preliminarily concluded that TikTok violates the Digital Services Act by exposing users to a continuous stream of personalised videos that can lead to harmful ‘rabbit holes’, especially concerning mental health and body image. The Commission’s findings focus on the platform’s risk assessment and required mitigation measures. The breach concerns both vulnerable adults and minors.

Why it matters for trust and compliance

  • Its status is announced. It is not law yet. Track it, but do not treat it as an obligation.
  • The finding signals heightened regulatory scrutiny of algorithmic recommendation systems under the EU’s DSA, with potential obligations for large online platforms.
  • It relates to DSA. The regulations library explains what that law requires.

Who is affected

technology platform developer TikTok

Recommended actions

  1. Inventory AI or automated decision systems in scope and their assessments.
  2. Review age assurance and protections for minors' data.

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

  • In force
  • Coming into force
  • Sector laws
AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL