Money. Identity. Technology.
Follow the money. Find the decision.
Public rules, funding and supervision of private compliance
The European Commission combines digital rulemaking, enforcement and research funding. It appears here through child-safety policy engagement, AI4TRUST funding, platform-data access procedures and binding AliExpress commitments overseen by a Commission-approved monitor paid by the company.
The European Commission occupies several different positions in this investigation. It participates in policy forums, funds research and exercises enforcement powers over major online services. These roles let it influence both the ideas available to policymakers and the practical conditions under which companies operate. Its WeProtect board participation is one route into child-safety discussion; its digital-service decisions carry a different, legally binding kind of authority.
The AliExpress case provides a particularly clear view of that authority. In June 2025 the Commission made commitments binding on named Dutch and Singapore entities. The arrangement included a monitoring trustee nominated and paid by the company, whose mandate required Commission approval. The Commission approved Ankura Consulting (Europe) in September 2025 and retained powers to give instructions or require replacement. A private consultancy thus performs work within a publicly supervised compliance structure.
The Commission also adopted procedures for project-specific researcher access under the Digital Services Act and was assigned responsibility for the data-access portal. Those arrangements define a route through which qualified researchers may obtain information from major platforms. Eligibility, the requested project and the access conditions matter because the resulting power is permission to inspect data that companies otherwise control.
Research funding is another channel. The Commission's records list approximately €5.95 million for the AI4TRUST project, including €385,275 for its German GDI participant. Separately, it announced a €550 million AliExpress fine in July 2026 concerning illegal-product risks. Together these examples show an institution able to finance knowledge production, establish obligations and demand changes in company conduct. Its importance lies in that combination of resources and public authority.
Reuters reports age-tiered access checks and supervisory fees in an unpublished Commission draft. The Commission declined comment; its actual text was not obtained. These reported design choices are neither adopted duties nor an exercised enforcement power.
Assessment updated 2026-09-14
Ankura Consulting (Europe), Limited → European Commission
C.9 prints impossible31November2027;recital16730November/C.12 two months.2026cycle not yet ended9September2026; no silent correction.
First cycle ends30September2025, first report due within2months; later cycles endSeptember2026/2027. Company copy may remove third-party confidential material. No actual receipt/report/response acquired.
European Commission → 2025/2050: project-specific access procedure
Published adopted regulation assigns prerequisites, request formulation, access modalities and amendment/delivery records. No named project approval or60-day GDI proposal adoption inferred.
European Commission → WeProtect Global Alliance
11–12 Jul 2022
July 2022 minutes record a Commission briefing to the WeProtect board and possible requests for assistance. Particular requests and resulting outputs are not established by this record.
European Commission → Ankura Consulting (Europe), Limited
Commission may reject/modify mandate and issue compliance instructions; replacement/discharge/hand-over governedC.7–8. No exercised instruction/replacement acquired.
European Commission → DSA data-access portal — public overview channel
Article3 assigns hosting and workflow functions. The captured shell is not evidence the register has no rows or requires login for public overviews.
European Commission → Alibaba.com Singapore E-commerce Private Limited
2025-06-18
Same decision and obligation family, not a second transfer or independent sanction. ExactSingaporeE-commercePrivateLimited name preserved.
European Commission → AliExpress International (Netherlands) B.V.
2025-06-18
Actual18June2025Article71 act; access commitments settle covered proceedings without an Article40 infringement adjudication or admission.
Weizenbaum Policy Paper14 — September2025 → European Commission
Authors propose guidance/codes and sustained public support. No adopted cure procedure, new grant or API right established by the paper.
The dated route reaches back before either 2024 report previously traced. A July2022 paper by Ian Levy and Crispin Robinson identifies their posts at the UK National Cyber Security Centre and GCHQ. The European Commission cited it in a public defence of its child-sexual-abuse proposal on 7August2022. eSafety cited it in an encryption position dated 13October2023. These are actual citations by public authorities, not merely institutional proximity.
Read the research & sources ↗At paragraph76, PDF17 , Full Fact argues that the proposed definition is too narrowly directed at public safety. It asks to include public health and national security, aligning the definition with section 175 and comparing the EU Digital Services Act's crisis definition. It describes the existing Secretary of State route to Ofcom's media-literacy priorities or public statement notices. This is a scope-alignment argument using an existing power as a benchmark, not a newly drafted executive activation power.
Read the research & sources ↗The proposal is sponsored by Safe Online and delivered by the Belgian nonprofit euCONSENT ASBL (cover and1.9, PDF3). It builds on an earlier European Commission-funded consortium project; do not backdate ASBL as the original 2021 grant recipient. The reported project-level funding purpose is established. The executed grant agreement, amount, subproject/vendor allocation, ultimate donor allocation and clearance/acceptance rights remain unacquired; a separately encountered $2million figure belongs to a ten-project portfolio and is not assigned here.
Read the research & sources ↗The earlier encryption-policy route ↗
AliExpress public-data access: binding duties and an appointed monitor ↗
A binding access obligation is not a proven delivery ↗
Research applications: reported reasons, incomplete decision records ↗
DSA research access: the decision-maker is identifiable; a GDI approval is not established ↗
The grant, the access decision and the action right ↗
GDI's Horizon role: a named research contribution, with reuse rights still missing ↗
FCDO reports support to the named GDI operation. The Commission records AI4TRUST project funding and a contribution for its German participant. These are two documented channels.
Open diagram →AliExpress must fund the trustee; the Commission approved Ankura and controls its mandate. QA and monitoring reports should travel back through specified channels.
Open diagram →Follow the named relationships between the main participants in this part of the investigation.
Open diagram →European Commission → Board representation → WeProtect Global Alliance
Read 7 Sep 2026
Published governance page records institutional board participation; distinct from ownership.
European Commission → Briefed board on EU proposal → WeProtect Global Alliance
11–12 Jul 2022
July 2022 minutes record a Commission briefing to the WeProtect board and possible requests for assistance. Particular requests and resulting outputs are not established by this record.
European Commission → publishes → European Commission public defence (August 2022)
7August 2022
Archived Commission communication. Current page credits DG Communication; no named individual attribution inferred.
European Commission → published the whole-project EU contribution → AI4TRUST, grant 101070190
Project interval; EC signature6December2022, registry last updated17June2026; not disbursement dates.
Reported by the cited source
CORDIS records EUR5950682.50 project contribution and cost. This is an aggregate project field, not GDI income or a dated payout. The separately displayed German participant contribution is included within this project, not extra funding to add.
Financial details: value: 5,950,682.5; currency: EUR; kind: published net EU project contribution; period: project1January2023-28February2026
Payment status: dated transfers unverified
European Commission → published a participant contribution of EUR 385275 → GDI Global Disinformation Index gUG (German participant)
Project1January2023-28February2026; exact participant accession/payment dates not obtained.
Reported by the cited source
CORDIS German GDI participant entry lists net EU contribution and total cost each EUR385275. The recipient is the German legal participant, not proven UK receipt, subaward or a bank transfer.
Financial details: value: 385,275; currency: EUR; kind: published net EU participant contribution; period: AI4TRUST project interval; payout dates unknown
Payment status: dated participant cash transfers unverified
European Commission → lists the research project as closed → AI4TRUST, grant 101070190
2026-06-17 – 2026-06-17
Reported by the cited source
CORDIS updated17June2026 labels the project closed with28February2026 end. This is project administrative status, not a declaration every resulting tool stopped or all final deliverables were accepted.
European Commission → adopted the project-specific research-access procedures → 2025/2050: project-specific access procedure
Published adopted regulation assigns prerequisites, request formulation, access modalities and amendment/delivery records. No named project approval or60-day GDI proposal adoption inferred.
European Commission → must establish and host the portal → DSA data-access portal — public overview channel
Article3 assigns hosting and workflow functions. The captured shell is not evidence the register has no rows or requires login for public overviews.
European Commission → made annexed commitments binding on the named addressee → AliExpress International (Netherlands) B.V.
2025-06-18
Actual18June2025Article71 act; access commitments settle covered proceedings without an Article40 infringement adjudication or admission.
European Commission → made annexed commitments binding on the named addressee → Alibaba.com Singapore E-commerce Private Limited
2025-06-18
Same decision and obligation family, not a second transfer or independent sanction. ExactSingaporeE-commercePrivateLimited name preserved.
European Commission → approved the named monitoring trustee → Ankura Consulting (Europe), Limited
2025-09-23
Official notice records23September2025approval; no report delivery, performance approval or fee payment established.
European Commission → approves mandate and may instruct or replace the trustee → Ankura Consulting (Europe), Limited
Commission may reject/modify mandate and issue compliance instructions; replacement/discharge/hand-over governedC.7–8. No exercised instruction/replacement acquired.