Brussels says tech group has failed to adequately assess and mitigate risks that could have a negative impact on users