Desiree Sainthrope is a preeminent legal expert who has spent years at the intersection of global compliance and international trade law. Her expertise in drafting complex trade agreements and her deep understanding of the regulatory hurdles facing emerging technologies make her a crucial voice in the current debate over digital sovereignty. In this conversation, she provides a critical perspective on the escalating friction between Brussels and Silicon Valley, exploring how these legal battles influence innovation, national security, and the delicate balance of transatlantic relations during a period of intense global competition.
The discussion explores the unprecedented scale of financial penalties imposed by the European Union under new regulatory frameworks and the resulting diplomatic tensions with the United States. It delves into the practical consequences for consumer technology, specifically the dismantling of integrated search features and the potential degradation of digital security. Furthermore, the conversation examines the geopolitical risks of a fractured Western alliance as Eastern tech powers continue to advance their artificial intelligence capabilities with significant state support.
With the European Union recently imposing over €1.5 billion in fines under the Digital Markets Act, how do you perceive this shift in the regulatory environment for major technology firms operating across borders?
The recent wave of enforcement represents a transformative and frankly bruising period for the global tech sector, signaling that the era of loose oversight has firmly ended. We are seeing staggering sums being levied in 2026, with Google alone facing €890 million in new penalties, contributing to a total of €1.59 billion in DMA-related fines against American firms. This isn’t just about the money; it is about a fundamental restructuring of how platforms operate, evidenced by the additional €1.28 billion in fines tied to the Digital Services Act and hundreds of millions in GDPR penalties for firms like ByteDance and AliExpress, who were fined €530 million and €550 million respectively. The atmosphere in Brussels has taken on a business-as-usual air, which is quite chilling for companies that are now facing threats of periodic penalties reaching up to 5% of their total worldwide turnover. It feels like a systemic shift where regulation is no longer a deterrent but a primary tool for market reconfiguration.
How are these aggressive enforcement actions impacting the delicate trade relationship between the United States and Europe, particularly regarding the predictability of future exports?
There is a palpable sense of friction as these actions drive massive uncertainty for U.S. exports of goods and services to Europe. Ambassador Jamieson Greer has been quite vocal, suggesting that while the EU claims to seek stability and predictability, its focus on targeting the most competitive American companies feels more like a targeted strike than a neutral application of law. The rhetoric from Washington is heating up, with some officials even calling for retaliatory tariffs to counter what they see as an unfair regulatory burden that favors European state-backed interests like Airbus. It is a tense moment where the “constructive dialogue” reported by the Commission sits in stark contrast to the fears that these regulations are becoming a de facto form of tax collection. This environment makes it incredibly difficult for firms to plan long-term investments when the rules of engagement seem to shift with every new Commission statement.
What are the practical consequences for everyday users and small businesses when tech giants are forced to modify their core services to comply with these search and store regulations?
Compliance often requires a literal dismantling of features that have become essential to the modern digital experience, such as real-time search results for flights, hotels, and restaurants. For a user, this means losing the convenience of instant pricing and direct availability, which essentially strips away the seamlessness we have grown to expect from high-end digital tools. Google has noted that to stay within the 60-day compliance window, they are having to strip away features Europeans love, which could have a significant knock-on impact for small businesses that rely on those integrated features for visibility. Beyond mere convenience, there is a serious concern regarding safety, as companies are forced to dismantle protections on stores like Google Play, potentially exposing users to more vulnerabilities in the name of “steering” freedom. It is a classic example of regulatory goals having unintended, messy consequences for the very people they are meant to protect.
From a legal and security standpoint, how do the data-sharing requirements of the DMA square with the billions of dollars currently invested in cybersecurity and privacy protections?
This is one of the most contentious areas where regulation and security seem to be at odds, as the data-sharing requirements are being condemned by both privacy advocates and national security experts. Companies like Apple and Meta pour billions of dollars into cyber protections that users benefit from daily, and there is a legitimate fear that opening up these ecosystems could undermine the very privacy and security they have built over decades. If companies are forced to share data or allow third-party access in ways that were previously restricted, it creates new attack vectors that didn’t exist before, essentially weakening the fortress to allow for more competition. The legal challenge here is balancing the EU’s desire for open innovation with the technical reality that a more “open” system is often a less secure one. We are watching a high-stakes experiment where the price of a more competitive market might be a more vulnerable digital infrastructure.
As we see firms like Moonshot release models like the Kimi K3, what are the risks of a deepening regulatory divide between the U.S. and Europe in the face of rising global competition?
The timing of these fines is particularly precarious because the global tech race is moving with incredible speed, as seen with the release of the Kimi K3 model which aims to rival the most advanced frontier AI. While evaluations by U.S. and UK vetting shops suggest these models currently perform below the most recent frontier cyber-capable models, the “DeepSeek moment” proves that the gap is closing rapidly through heavy state subsidies. If the U.S. and Europe remain distracted by internal regulatory battles and fines, they risk missing the broader threat posed by a highly subsidized Chinese tech sector exploiting gaps in global markets. We are at a crossroads where tech-driven division between allies could inadvertently hand the lead in innovation to competitors who do not share our democratic values or commitment to privacy. This is precisely the moment when transatlantic harmony is needed most to counter acute external threats.
What is your forecast for the Digital Markets Act?
Looking ahead toward 2027 and 2028, I anticipate that the European Commission will remain unrepentant and fully committed to this aggressive phase of enforcement, likely leading to even more DMA actions. However, for the EU to truly achieve its stated endgame of “innovation opportunities,” it will need to shift its focus from merely penalizing foreign giants to actively scaling its own tech champions. We will likely see a proliferation of similar legislation globally, such as the “App Store Freedom Act” being discussed in the U.S. Congress, which suggests that the European model of regulation is becoming a global export. Ultimately, the success of the DMA will not be measured by the billions of euros collected in fines, but by whether it actually fosters a more competitive and innovative European tech sector without permanently damaging the security and convenience that users have come to rely on.
