Meta Faces EU Fine Up to 6% of Global Revenue — Found in Breach of DSA

The European Commission has found Meta to be in breach of EU law for failing to stop children under 13 from using Facebook and Instagram. The preliminary ruling, announced Wednesday after a nearly two-year investigation, sets the stage for a significant enforcement action under the Digital Services Act (DSA) and threatens Meta with a fine that could reach into the billions. According to Forbes, the penalty could be as high as 6% of the company's global revenue.

The DSA's First Big Test

The Commission’s core finding is that Meta's platforms are in violation of the DSA. Both The Verge and The Guardian report that regulators concluded Meta does not have adequate or effective measures in place to verify user ages and prevent underage access. This ruling is the culmination of a probe that began almost two years ago, scrutinizing the tools and processes Meta uses to comply with the EU's age-of-consent rules for digital services.

This case represents one of the first major tests of the DSA, a sweeping piece of legislation designed to govern how large online platforms moderate content, handle user data, and protect vulnerable users. The preliminary finding against Meta signals that the Commission is moving from drafting regulations to active enforcement. Meta will have an opportunity to respond to the findings before a final decision is made, but the initial ruling is a clear shot across the bow.

A Multi-Billion Dollar Threat

The financial stakes for Meta are substantial. While the Commission has not specified a figure, the DSA empowers it to levy fines up to 6% of a company's global turnover for serious breaches. Based on Meta's recent annual revenues, such a fine could exceed $8 billion. This is not a cost of doing business; it is a structural threat designed to compel compliance.

Together, these reports point to a new era of regulatory risk for Big Tech in Europe. The EU is no longer just issuing guidance or accepting promises of self-regulation. The DSA provides a legal and financial hammer, and the Commission has just shown its willingness to swing it. The size of the potential penalty is calibrated to get the attention of a C-suite and board of directors, forcing the issue of compliance from a legal footnote to a primary business risk.

The Unsolved Problem of Age Verification

Meta's defense will likely center on the technical difficulty of reliably verifying the age of every user on the internet. It is a genuinely complex problem. Yet, the Commission's patience has clearly worn thin. The pattern indicates a fundamental disconnect: Meta, a company that built an unprecedentedly sophisticated engine for identifying and profiling users for advertising, is deemed incapable of determining if a user is 12 or 14.

This suggests the problem is less about technical feasibility and more about business incentives. A stricter age-gating system would inevitably mean fewer users, less engagement, and less data—all metrics that run counter to a platform's growth model. The EU's action is a direct attempt to change that calculus, making the cost of non-compliance greater than the cost of losing underage users.