From the journal

European Commission accepts Temu's action plan for Digital Services Act compliance

The European Commission has accepted Temu's action plan to address its breaches of the Digital Services Act (DSA). This decision indicates the Commission's ongoing enforcement of the DSA and its commitment to ensuring compliance among digital service providers.

1 min read

The European Commission accepted Temu's action plan on 26 October 2026 to remedy its breaches of the Digital Services Act (DSA). The action plan aims to address the identified infringements and ensure compliance with the DSA.

The Commission's decision relies on the provisions of the Digital Services Act, specifically addressing the corrective measures required from Temu.

This decision applies to Temu, which is identified as the entity responsible for the breaches of the DSA.

The Commission is also consulting stakeholders on developing a voluntary Code of Conduct to combat online fraud and scams under the DSA. This initiative may affect fintech and crypto firms operating online, as they could be expected to adhere to new standards for preventing fraud.

Source: European Commission, official publication, retrieved 2026-10-26

More from the journal

See all

Software escrow for South African AI supplied to an Irish bank

A Cape Town AI supplier offers source-code escrow to an Irish bank that depends on its fraud-alert service. The bank needs a way to continue operating after supplier failure, but the software also depends on licensed model technology and cloud services. A workable arrangement requires a recoverable deployment, permission to operate it and an alternative when a necessary dependency cannot survive the supplier.

AI debt collection from India and the UK authorisation boundary

A Pune company supplies an AI debt collection system to a UK consumer-credit lender authorised by the Financial Conduct Authority (FCA). The system drafts reminders, schedules contacts and proposes repayment options, while the lender approves customer communications and decides forbearance. The supplier wants a later version to contact borrowers and negotiate within lender-set limits. The recommended first release keeps collection activity with the lender; the supplier-operated version needs a different permission and operating structure.

Crypto Travel Rule failures between a Brazilian provider and an Irish CASP

A Brazilian virtual-asset provider wants to transfer business customers' crypto-assets to an Irish crypto-asset service provider, or CASP. The assets reach the receiving address with incomplete originator information and a legal-entity name that does not match the recipient account. The sender demands immediate release because the blockchain transfer is final. The Irish receiver should hold customer availability while it resolves the identities and missing data, then make a documented release or return decision.