The Enforcement Gap

Sweeping digital laws sound formidable on paper, but the reality of enforcement is often bound by a much more mundane limitation: headcount.

The European Commission, tasked with policing the Digital Markets Act, operates under significant resource constraints. Antitrust enforcement has historically moved at a glacial pace, taking years to resolve major cases like Google Shopping. When a single regulatory body is charged with overseeing the sprawling digital economy, speed and efficiency are nearly impossible to maintain.

To bridge this gap, the system relies heavily on massive, extraterritorial fines calculated as a percentage of global annual turnover. While critics, including the U.S. Chamber of Commerce, dismiss these towering penalties as arbitrary cash grabs, defenders view them as a necessary counterweight to limited regulatory capacity. Yet for all the theater of multi-billion-euro threats, no company has actually been sanctioned for a DMA infringement yet. The ultimate penalty—forcing structural divestments for repeated noncompliance—sits on the books like a loaded weapon, but its true deterrent effect remains untested.

Meanwhile, multinational enterprises navigate a dizzying, interlocking architecture of rules that includes the AI Act, Data Act, NIS2, and DORA. The sheer friction of this compliance maze has invited a predictable workaround: compliance theater. Rather than overhauling foundational infrastructure, organizations frequently opt for surface-level adaptations that satisfy the paperwork without altering the reality. The distance between writing a law that claims digital sovereignty and possessing the institutional machinery to enforce it leaves a wide, quiet space where actual behavior rarely changes.