European Union flags flutter outside the EU Commission headquarters, in Brussels, Belgium, February 1, 2023
Yves Herman | Reuters
When Gerard de Graaf moved from Europe to San Francisco almost a year ago, his job had a very different feel to it.
De Graaf, a 30-year veteran of the European Commission, was tasked with resurrecting the EU office in the Bay Area. His title is senior envoy for digital to the U.S., and since September his main job has been to help the tech industry prepare for new legislation called The Digital Services Act (DSA), which goes into effect Friday.
At the time of his arrival, the metaverse trumped artificial intelligence as the talk of the town, tech giants and emerging startups were cutting thousands of jobs, and the Nasdaq was headed for its worst year since the financial crisis in 2008.
Within de Graaf’s purview, companies including Meta, Google, Apple and Amazon have had since April to get ready for the DSA, which takes inspiration from banking regulations. They face fines of as much as 6% of annual revenue if they fail to comply with the act, which was introduced in 2020 by the EC (the executive arm of the EU) to reduce the spread of illegal content online and provide more accountability.
Coming in as an envoy, de Graaf has seen more action than he expected. In March, there was the sudden implosion of the iconic Silicon Valley Bank, the second-largest bank failure in U.S. history. At the same time, OpenAI’s ChatGPT service, launched late last year, was setting off an arms race in generative AI, with tech money pouring into new chatbots and the large language models (LLMs) powering them.
It was a “strange year in many, many ways,” de Graaf said, from his office, which is co-located with the Irish Consulate on the 23rd floor of a building in downtown San Francisco. The European Union hasn’t had a formal presence in Silicon Valley since the 1990s.
De Graaf spent much of his time meeting with top executives, policy teams and technologists at the major tech companies to discuss regulations, the impact of generative AI and competition. Although regulations are enforced by the EC in Brussels, the new outpost has been a useful way to foster a better relationship between the U.S. tech sector and the EU, de Graaf said.
“I think there’s been a conversation that we needed to have that did not really take place,” said de Graaf. With a hint of sarcasm, de Graaf said that somebody with “infinite wisdom” decided the EU should step back from the region during the internet boom, right “when Silicon Valley was taking off and going from strength to strength.”
The thinking at the time within the tech industry, he said, was that the internet is a “different technology that moves very fast” and that “policymakers don’t understand it and can’t regulate it.”
Facebook Chairman and CEO Mark Zuckerberg arrives to testify before the House Financial Services Committee on “An Examination of Facebook and Its Impact on the Financial Services and Housing Sectors” in the Rayburn House Office Building in Washington, DC on October 23, 2019.
Mandel Ngan | AFP | Getty Images
However, some major leaders in tech have shown signs that they’re taking the DSA seriously, de Graaf said. He noted that Meta CEO Mark Zuckerberg met with Thierry Breton, the EU commissioner for internal market, to go over some of the specifics of the rules, and that X owner Elon Musk has publicly supported the DSA after meeting with Breton.
De Graaf said he’s seeing “a bit more respect and understanding for the European Union’s position, and I think that has accelerated after generative AI.”
‘Serious commitment’
X, formerly known as Twitter, had withdrawn from the EU’s voluntary guidelines for countering disinformation. There was no penalty for not participating, but X must now comply with the DSA, and Breton said after his meeting with Musk that “fighting disinformation will be a legal obligation.”
“I think, in general, we’ve seen a serious commitment of big companies also in Europe and around the world to be prepared and to prepare themselves,” de Graaf said.
The new rules require platforms with at least 45 million monthly active users in the EU to provide risk assessment and mitigation plans. They also must allow for certain researchers to have inspection access to their services for harms and provide more transparency to users about their recommendation systems, even allowing people to tweak their settings.
Timing could be a challenge. As part of their cost-cutting measures implemented early this year, many companies laid off members of their trust and safety teams.
“You ask yourself the question, will these companies still have the capacity to implement these new regulations?” de Graaf said. “We’ve been assured by many of them that in the process of layoffs, they have a renewed sense of trust and safety.”
The DSA doesn’t require that tech companies maintain a certain number of trust and safety workers, de Graaf said, just that they comply with the law. Still, he said one social media platform that he declined to name gave an answer “that was not entirely reassuring” when asked how it plans to monitor for disinformation in Poland during the upcoming October elections, as the company has only one person in the region.
That’s why the rules include transparency about what exactly the platforms are doing.
“There’s a lot we don’t know, like how these companies moderate content,” de Graaf said. “And not just their resources, but also how their decisions are made with which content will stay and which content is taken down.”
De Graaf, a Dutchman who’s married with two kids, has spent the past three decades going deep on regulatory issues for the EC. He previously worked on the Digital Services Act and Digital Markets Act, European legislation targeted at consumer protection and rights and enhancing competition.
This isn’t his first stint in the U.S. From 1997 to 2001, he worked in Washington, D.C., as “trade counsellor at the European Commission’s Delegation to the United States,” according to his bio.
For all the talk about San Francisco’s “doom loop,” de Graaf said he sees a different level of energy in the city as well as further south in Silicon Valley.
There’s still “so much dynamism” in San Francisco, he said, adding that it’s filled with “such interesting people and objective people that I find incredibly refreshing.”
“I meet very, very interesting people here in Silicon Valley and in San Francisco,” he said. “And it’s not just the companies that are kind of avant-garde as the people behind them, so the conversations you have here with people are really rewarding.”
The generative AI boom
Generative AI was a virtually foreign concept when de Graaf arrived in San Francisco last September. Now, it’s about the only topic of conversation at tech conferences and cocktail parties.
The rise and rapid spread of generative AI has led to a number of big tech companies and high-profile executives calling for regulations, citing the technology’s potential influence on society and the economy. In June, the European Parliament cleared a major step in passing the EU AI Act, which would represent the EU’s package of AI regulations. It’s still a long way from becoming law.
De Graaf noted the irony in the industry’s attitude. Tech companies that have for years criticized the EU for overly aggressive regulations are now asking, “Why is it taking you so long?” de Graaf said.
“We will hopefully have an agreement on the text by the end of this year,” he said. “And then we always have these transitional periods where the industry needs to prepare, and we need to prepare. That might be two years or a year and a half.”
The rapidly changing landscape of generative AI makes it tricky for the EU to quickly formulate regulations.
“Six months ago, I think our big concern was to legislate the handful of companies — the extremely powerful, resource rich companies — that are going to dominate,” de Graaf said.
But as more powerful LLMs become available for people to use for free, the technology is spreading, making regulation more challenging as it’s not just about dealing with a few big companies. De Graaf has been meeting with local universities like Stanford to learn about transparency into the LLMs, how researchers can access the technology and what kind of data companies could provide to lawmakers about their software.
One proposal being floated in Europe is the idea of publicly funded AI models, so control isn’t all in the hands of big U.S. companies.
“These are questions that policymakers in the U.S. and all around the world are asking themselves,” de Graaf said. “We don’t have a crystal ball where we can just predict everything that’s happening.”
Even if there are ways to expand how AI models are developed, there’s little doubt about where the money is flowing for processing power. Nvidia, which just reported blowout earnings for the latest quarter and has seen its stock price triple in value this year, is by far the leader in providing the kind of chips needed to power generative AI systems.
“That company, they have a unique value proposition,” de Graaf said. “It’s unique not because of scale or a network effect, but because their technology is so advanced that it has no competition.”
He said that his team meets “quite regularly” with Nvidia and its policy team and they’ve been learning “how the semiconductor market is evolving.”
“That’s a useful source information for us, and of course, where the technology is going,” de Graaf said. “They know where a lot of the industries are stepping up and are on the ball or are going to move more quickly than other industries.”
South Korea’s data protection authority has concluded that Chinese artificial intelligence startup DeepSeek collected personal information from local users and transferred it overseas without their permission.
The authority, the Personal Information Protection Commission, released its written findings on Thursday in connection with a privacy and security review of DeepSeek.
It follows DeepSeek’s removal of its chatbot application from South Korean app stores in February at the recommendation of PICP. The agency said DeepSeek had committed to cooperate on its concerns.
During DeepSeek’s presence in South Korea, it transferred user data to several firms in China and the U.S. without obtaining the necessary consent from users or disclosing the practice, the PIPC said.
The agency highlighted a particular case in which DeepSeek transferred information from user-written AI prompts, as well as device, network, and app information, to a Chinese cloud service platform named Beijing Volcano Engine Technology Co.
While the PIPC identified Beijing Volcano Engine Technology Co. as “an affiliate” of TikTok-owner ByteDance, the information privacy watchdog noted in a statement that the cloud platform “is a separate legal entity and has no relation to ByteDance,” according to a Google translation.
According to PIPC, DeepSeek said it used Beijing Volcano Engine Technology’s services to improve the security and user experience of its app, but later blocked the transfer of AI prompt information from April 10.
DeepSeek and ByteDance did not immediately respond to inquiries from CNBC.
The Hangzhou-based AI startup took the world by storm in January when it unveiled its R1 reasoning model, rivaling the performance of Western competitors despite the company’s claims that it was trained for relatively low costs and with less advanced hardware.
However, the app’s rising popularity quickly triggered national security and data concerns outside China due to Beijing’s requirement for domestic firms to share data with the PRC. Cybersecurity experts have also flagged data vulnerabilities in the app and voiced concerns about the company’s privacy policy.
PIPC on Thursday said it had issued a corrective recommendation to DeepSeek, which includes requests to immediately destroy AI prompt information transferred to the Chinese company in question and to set up legal protocols for transferring personal information overseas.
When the data protection authority announced the removal of DeepSeek from local app stores, it signaled that the app would become available again once the company implemented the necessary updates to comply with local data protection policy.
That investigation followed reports that some South Korean government agencies hadbanned employees from using DeepSeek on work devices. Other global government departments, including in Taiwan, Australia, and the U.S., have reportedly instituted similar bans.
Adobe’s new artificial intelligence image models, Firefly Image Model 4 and Firefly Image Model 4 Ultra, can generate hyper-realistic pictures in response to user prompts.
Adobe
LONDON — Adobe plans to launch a mobile version of its artificial intelligence image generation tool Firefly, stepping up a challenge to OpenAI as the Microsoft-backed startup advances its efforts on visual applications for the technology.
The design software giant said Thursday at its MAX creativity conference in London that it will release Firefly on both iOS and Android “soon,” without giving a specific date.
“Creative people think on the go,” Alexandru Costin, vice president of Adobe Firefly, told CNBC in an interview. “One of the visions we have is for the Firefly mobile application to become a creative partner that sits with you all the time.”
Costin said that one way creatives could use its upcoming mobile app was to ask it to sketch up some ideas about an ad campaign while commuting to the office, so that by the time they arrive at work they’ve got a mood board to help them develop their thinking.
Adobe also announced the launch of its latest AI models, Firefly Image Model 4 and Firefly Image Model 4 Ultra, and said its new Firefly Video Model for video generation is now generally available.
The company said the new systems are capable of generating hyper-realistic pictures and videos in response to textual prompts in a “commercially safe” way, blocking the inclusion of any intellectual property.
Competition from OpenAI
It marks Adobe’s latest push to incorporate AI into its creative tool suite and comes as the company is increasingly facing competition from well-funded AI firms such as OpenAI and Runway.
Last month, OpenAI released a native image generation feature that went viral online for its ability to produce anime images in the style of animation studio Studio Ghibli and recreate people as toy dolls.
The tool saw such huge levels of demand that OpenAI boss Sam Altman warned it was melting the company’s GPUs (graphics processing units). “It’s super fun seeing people love images in ChatGPT. But our GPUs are melting,” Altman said on March 27.
While Adobe’s Costin conceded that the competitive environment is heating up, he said the company isn’t shying away from partnering with the competition. For example, Adobe has partnered up with the likes of OpenAI, Google and Runway to add their AI image generation tools to Firefly.
“Competition is great,” Costin told CNBC. “We think there will be models with different personalities and capabilities.”
Revolut CEO Nikolay Storonsky at the Web Summit in Lisbon, Portugal, Nov. 7, 2019.
Pedro Nunes | Reuters
LONDON — British fintech firm Revolut on Thursday announced it topped $1 billion in annual profit for the first time, a major milestone for the company as it readies the launch of its U.K. bank later this year.
Revolut, which offers a range of banking and financial services via an app, said that net profit for the year ending Dec. 31, 2024, totaled £1.1 billion ($1.5 billion), up 149% year over year. Revenues at the company increased 72% year on year to £3.1 billion, driven by growth across different revenue streams.
Revolut’s wealth unit — which includes its stock-trading business — saw outsized growth, with revenue surging 298% to £506 million, while subscriptions turnover jumped 74% to £423 million.
Revolut also saw significant growth in its loan book, which grew 86% to £979 million. Coupled with a jump in customer deposits, this contributed to a 58% increase in interest income, which totaled £790 million.
UK bank rollout
Revolut’s financial milestone arrives at a critical time for the almost decade-old-firm. The digital banking unicorn has been preparing a transition to becoming a fully operational bank in the U.K. after securing a banking license last summer.
It was granted a banking license with restrictions in July 2024 from the U.K.’s Prudential Regulation Authority, bringing an end to a lengthy application process that began back in 2021.
The restricted license means that Revolut is now in the “mobilization” stage, where it is focusing on building out its banking operations and infrastructure in the run-up to a full launch. The period typically lasts about 12 months.
Revolut is still awaiting approval from regulators to transfer all 11 million of its U.K. users to a new banking entity this summer. Once fully up and running, the firm will be able to begin offering loans, overdrafts and mortgages, opening up the path to new income streams.
‘Customers trust banks’
Victor Stinga, Revolut’s chief financial officer, told CNBC on Thursday that the company’s aim is to formally launch its U.K. bank later this year.
“As you can imagine, at this scale, it’s a thorough process, and we just pay a lot of attention to it,” Stinga said. “We work very closely on a close contact with the PRA [Prudential Regulation Authority] and the FCA [Financial Conduct Authority] on it. We feel like we’re making great progress on it.”
Stinga said that a big advantage of becoming a bank in the U.K. is ability to start accepting deposits protected by government guarantees. Licensed banks are covered by the Financial Services Compensation Scheme, which means their customers can claim up to £85,000 if a lender goes out of business.
“Customers trust banks, so it means customers on this transition will use Revolut as a primary bank account,” Stinga said.
Lending is arguably “the biggest roadmap item that this unlocks,” Revolut’s CFO said, adding that the firm is looking at launching credit cards and personal loans, similar to the products it already offers in the European Union under a separate EU banking license.
Francesca Carlesi, Revolut’s U.K. boss, previously told the Wall Street Journal that Revolut views its journey to becoming a U.K. bank as a crucial step in its global expansion and eventual IPO. “My main strategic focus is making Revolut the primary bank for everybody in the U.K.,” she told the WSJ.
It has a steep hill to climb — rivals Monzo and Starling have had a lengthy head start on Revolut. Monzo obtained its full banking license in 2017, while Starling was granted its own permit in 2016.