In case you missed it – EDPO weekly recap | 1–5 June 2026
Here is a brief recap of the news and updates we shared last week.
Meta’s employee data collection plans for AI training drew renewed scrutiny, with Reuters reporting that the Model Capability Initiative could capture broader computer usage data than initially described, including non-US data. A later update reported that Meta is scaling back the rollout by allowing employees to pause data collection for up to 30 minutes at a time and request exemptions. [1] [5]
EU digital sovereignty remained a central theme. Reuters reported that draft EU cloud rules could introduce strict criteria for highly critical public sector tenders, potentially limiting access for major US cloud providers. Euractiv later reported that the Commission’s Cloud and AI Development Act would not push US hyperscalers out of the European market, but would require Member States to assess risks and develop plans for migrating public administration data to cloud services certified under EU-harmonised assurance levels. [2] [4]
The European Parliament is also moving away from Google as its default search engine on in-house computers, replacing it with the French search engine Qwant in line with its stated commitment to digital sovereignty and the protection of users’ personal data. [3]
References:
[1] Meta on collision course with EU privacy rules: https://lnkd.in/eDbpfKQ8
[2] Exclusive: EU cloud rules to curb Big Tech’s access to strategic tenders, draft document shows: https://lnkd.in/esshspaG
[3] European Parliament ditches Google for French search firm over privacy concerns: https://lnkd.in/e6mhyfsb
[4] Commission’s sovereign cloud plan doesn’t push US hyperscalers out: https://lnkd.in/eRydyh63
[5] Meta workers can opt out of being tracked at work – but only for half an hour at a time: https://lnkd.in/e5MY4ajf
*These articles were not written by EDPO. The opinions and views of the author(s) do not necessarily represent those of EDPO.
GDPR and UK GDPR Representative Liability: Why the Rules Differ Between the EU and the UK
For organisations based outside Europe, appointing an EU or UK representative under Article 27 GDPR or UK GDPR is often treated as a...
GDPR Subject Rights: What are they, and what do they mean for companies outside of the EU
If you are a non-EU company that offers goods or services to people in the EU, or monitors their behaviour, you can be in scope of the GDPR...
5 GDPR mistakes US companies make in 2025 – and how to avoid them
The General Data Protection Regulation (GDPR) continues to apply to many US companies in 2025, even if they do not have a physical presence...

