Glossary · EU Content Regulation DSA (Digital Services Act)
The 2022 EU regulation establishing content moderation, transparency, and user protection requirements for online platforms operating in the EU.
## What the DSA actually does
The Digital Services Act (Regulation (EU) 2022/2065) is the EU's comprehensive regulation governing online platforms' responsibilities for the content they host and the services they provide. It entered into force in November 2022, with full application from February 2024 for most provisions.
The DSA modernizes the EU's e-commerce framework (last meaningfully updated in 2000) for the era of large platforms, algorithmic content distribution, and online harms. Its core principle: what is illegal offline should be illegal online, with proportionate platform responsibilities for removing illegal content.
## Three categories of platforms
The DSA imposes graduated obligations based on platform size and impact:
### Hosting services (basic obligations)
Any service that stores user content (web hosts, file storage, cloud platforms):
- Notice-and-action mechanisms for users to report illegal content
- Due process protections for content removal
- Statement of reasons for content moderation decisions
### Online platforms (additional obligations)
Platforms that distribute user content (social networks, marketplaces, app stores):
- Trusted flagger systems
- Transparency reporting on content moderation
- Protection of minors (no targeted advertising based on profiling)
- Out-of-court dispute settlement
- Internal complaint handling
### Very Large Online Platforms / VLOPs (most stringent obligations)
Platforms with 45+ million EU users (Meta, Google, TikTok, Amazon, Apple, Microsoft, Booking.com, etc.):
- Annual independent risk assessments of systemic risks
- Systemic risk mitigation measures
- Crisis response mechanisms
- Researcher data access
- Algorithmic transparency
- External auditing requirements
## Designated VLOPs (as of 2026)
The Commission has designated 25+ VLOPs and Very Large Online Search Engines (VLOSEs):
- Meta platforms (Facebook, Instagram, WhatsApp)
- Google services (Search, YouTube, Maps, Play, Shopping)
- Apple App Store
- Microsoft (LinkedIn, Bing)
- Amazon Marketplace
- TikTok
- Snapchat
- Booking.com
- AliExpress
- Wikipedia (designated but with substantially lighter obligations due to its non-commercial nature)
VLOPs face the most rigorous DSA obligations and the highest enforcement scrutiny.
## Why the DSA matters for European tech
The DSA creates several structural opportunities and obligations:
**1. Platform liability becomes operational** — VLOPs must actively manage systemic risks (disinformation, election integrity, child safety, illegal content). This creates compliance overhead that smaller platforms don't bear.
**2. Algorithmic transparency** — VLOPs must disclose how recommendation algorithms work and offer non-personalized alternatives. This benefits users and creates structural pressure on engagement-maximization business models.
**3. Researcher access** — DSA Article 40 requires VLOPs to provide vetted researchers access to platform data. This creates accountability infrastructure that didn't exist before.
**4. Trusted flagger system** — civil society organizations get expedited content reporting. European NGOs are increasingly designated as trusted flaggers, giving European voices more weight in content moderation.
**5. Children's protection** — explicit prohibition on profiling-based advertising to minors. This creates structural advantages for non-tracking-based monetization models.
For European tech businesses, the DSA's requirements scale with platform size. Small SaaS businesses have minimal DSA obligations. Mid-size platforms have moderate obligations. VLOPs face substantial compliance overhead.
## Penalty structure
DSA penalties are substantial:
- **Up to 6% of global annual turnover** for non-compliance with DSA obligations
- **Periodic penalty payments** of up to 5% of average daily turnover for ongoing non-compliance
- **Suspension of service** in cases of systematic and serious infringement (rare but available)
The 6% threshold is lower than DMA's 10% but still substantial — for a €100B-revenue VLOP, a 6% fine is €6B.
## Enforcement actions through 2026
The Commission has been active:
- **TikTok** — multiple investigations regarding minor protection, addictive design, and advertising transparency
- **X / Twitter** — investigations regarding advertising transparency, dark pattern interfaces, and disinformation handling
- **Meta** — investigations regarding content moderation effectiveness, election integrity, transparency
- **Pornhub** — designated as VLOP in 2024, ongoing compliance discussions
The pattern: the Commission is establishing enforcement precedent carefully, with focus on systemic issues rather than individual content disputes.
## DSA's relationship to other EU regulations
The DSA fits into the broader EU digital regulation framework:
- **GDPR** — protects personal data; DSA protects users from platform-mediated harms
- **DMA** — companion regulation addressing competition concerns; DSA addresses content/services concerns
- **AI Act** — addresses AI system risks; DSA addresses platform behaviors regardless of AI involvement
- **AVMSD** (Audiovisual Media Services Directive) — applies to video sharing; DSA broader
The four regulations together create a comprehensive EU digital regulation landscape. For platforms operating in the EU, all four typically apply with overlapping obligations.
## What this means for European alternatives
The DSA creates structural advantages for European-built platforms:
**1. Smaller platforms have lighter obligations** — European startups face minimal DSA compliance overhead while VLOPs (mostly US-headquartered) bear substantial compliance costs.
**2. Privacy-respecting monetization avoids profiling penalties** — platforms that don't profile users for advertising don't face the DSA's restrictions on profiling-based ads to minors.
**3. Transparent algorithms differentiate** — European platforms with clear, non-engagement-maximizing recommendation logic can credibly position against opaque US incumbents.
**4. EU-resident operations simplify compliance** — DSA enforcement happens through EU regulators; EU-headquartered platforms have direct, efficient regulatory relationships.
For European tech buyers and users, the DSA creates conditions favorable to European alternatives' growth.
## What 2026-2027 brings
- **Continued enforcement actions** against VLOPs
- **Risk assessment maturity** — first round of formal annual risk assessments completed; benchmarks emerging
- **Trusted flagger network expansion** — more European civil society organizations designated
- **Researcher data access cases** — first formal disputes about Article 40 implementation
- **Court challenges** — ongoing litigation about specific DSA provisions
- **Coordination with DMA enforcement** — Commission applying overlapping regulations
The DSA is the most significant content regulation in EU history. Its operational impact on European digital markets is substantial and growing.
Was this helpful?
Thanks for your feedback!