The European Commission has put a loud, specific target on a familiar product pattern: Facebook and Instagram’s “addictive” design. In a development aimed squarely at the Digital Services Act, the regulator says those engagement mechanics violate the law.

That is not a vague complaint about “harm” in the abstract. The Commission’s framing is about design, and design is the lever executives can actually pull. If an algorithm-driven feed, notifications, and infinite scroll are part of what makes a platform feel hard to put down, the EU is signaling that those incentives and features can be treated as unlawful under the Digital Services Act.

To understand why this matters, you have to know how the Digital Services Act (DSA) changes the compliance game for major online platforms. The DSA is built to make platform responsibilities more concrete, especially around risk management and accountability. It is not only about removing illegal content after the fact. It is also about how services are structured and operated, and what kinds of systemic risks those structures can create.

“Addictive” is a loaded word, but it is also a straight line to product decisions. Platform leaders have spent years optimizing for engagement because engagement is the fuel for ad reach, creator growth, and retention. Those goals are not inherently illegal. The Commission’s claim is that the particular way Facebook and Instagram are designed to hold attention crosses a legal threshold.

Executives should also notice what this means for board oversight. Boards are increasingly expected to understand not just revenue outcomes, but also the regulatory and societal risks tied to product mechanics. When regulators focus on design rather than only content, it broadens the compliance blast radius. It means legal, policy, trust and safety, and product can no longer be siloed. A tweak to how recommendations are served, a change to notifications, or an adjustment to autoplay behavior can all become governance questions.

There is also a competitive angle. If the EU is willing to call out specific engagement design approaches as unlawful, other platforms operating in Europe may face knock-on pressure. They do not have to wait for their own turn. Internal audit teams can preemptively scan features that maximize time on platform. Product teams may be asked to validate whether “growth” strategies could be interpreted as “addictive” engagement mechanics under the DSA.

For companies like Facebook and Instagram, the immediate strategic stake is compliance readiness. A regulator saying a design violates the DSA can translate into enforcement actions, mandated changes, and ongoing monitoring. Even if the companies dispute the claim, the cost of delay is real: redesign cycles take time, experimentation budgets shrink under compliance constraints, and leadership attention gets pulled away from iteration toward remediation.

For peers, the second-order risk is that regulatory scrutiny becomes part of the product roadmap. Today, many platform executives think of policy as a constraints layer added after product work. The Commission’s stance suggests the opposite direction is coming: policy will increasingly shape the earliest stages of product design because engagement mechanics are now a legal category, not just a user experience choice.

The bottom line: the European Commission is asserting that Facebook and Instagram’s “addictive” design violates the Digital Services Act. For decision-makers, that is a clear signal that engagement optimization is no longer only a growth metric. In the EU, the design choices behind that metric can become a compliance battleground.