France, Spain, Ireland and the Netherlands have been referred to the Court of Justice over NIS2, underscoring how cybersecurity compliance can become a legal issue, not just an administrative one.
The EU’s confirmed €4 billion sanction against Google is more than a legal endpoint - it is a sharp reminder that control over defaults can shape competition, choice, and access across the mobile economy.
The dispute is less about a single breach than about whether two major EU members are keeping pace with the bloc’s cybersecurity baseline.