Trend Radar Week 32/2026: Reviews, AI Act and Security

Google tightens guidance on reviews and product data

In recent weeks Google updated several Search Central documents. On July 24, the review snippet guidelines added guidance around fake and undisclosed incentivised reviews. On July 7, merchant listing structured data gained the Product.category property so merchants can provide cleaner category information for Google Search and Shopping. Both updates sound technical, but they affect small businesses that show reviews, products or services online.

What does this mean for you? Do not buy, swap or hide reviews. If a benefit was given for a review, transparency matters; a clean process for real customer feedback is better anyway. Also review structured data on product and service pages: name, price, availability, category and reviews must match the visible page. Reviews are not decoration; they are a trust element with legal and SEO risk.

AI Act: further rules apply from early August

Bitkom pointed out on July 31 that further rules of the European AI Act apply from Sunday, while many questions remain open. For small companies the key point is not that every AI tool is suddenly forbidden. The point is that AI use is gradually becoming more regulated, more documented and more explainable. If you use chatbots, text generators, applicant screening, support automation or image generation, you should not wait until a customer asks.

What does this mean for you? Create a simple AI inventory: which tools are used, for what purpose, with which data and who approves the output? Customer data, health data, contract details and applications should not be pasted into external systems without a clear setup. For website content, AI may help with drafts, but responsibility, fact-checking and tone remain yours. A customer-facing chatbot needs limits, privacy review and a route to a human.

Cyber attacks do not only hit large corporations

On August 6, Bitkom warned about hybrid threats including drone attacks, sabotage and cyber attacks against the economy. Small businesses are not always the primary target of geopolitical incidents, but they are often hit through the same methods: phishing, compromised passwords, outdated software, ransomware or manipulated invoices. A website is often not the only attack surface, but it is a visible one.

What does this mean for you? Check the boring basics: strong passwords, two-factor login, updates, backups, role permissions and clear responsibility. If nobody owns security, it becomes luck. For WordPress, shops and contact forms, updates and backups should be documented. Also prepare an emergency note: who to call, where credentials are stored, how to take the site offline and how to restore a clean backup.

Germany remains mid-table on digital performance

Bitkom reported on August 3 that Germany ranks 17th in the EU DESI digital index for 2026. Rankings may feel far away from the daily work of a hairdresser, craft business or consultant. In practice, they show why customer expectations differ so much: some people want to book everything online, others still call; some compare on Google, others rely on recommendations and social media.

What does this mean for you? Your website does not need to become a platform, but it must get the digital basics right: fast on mobile, clear services, real prices or price ranges, easy contact options, local visibility and trust through photos, reviews and references. An old online business card loses not because of a ranking, but because it creates friction in everyday decisions.

In brief

• Google Search Central added guidance on July 29 for analysing social and video content in Search Console. Check whether your platform profiles are properly connected to the website.
• Google’s blog summarised July AI updates on August 4. For SMEs, the practical rule remains: test AI on small, safe workflows first, not on sensitive customer data.
• If you run a shop, check product categories and information not only inside the shop backend, but also in the visible frontend and structured data.