| European Union regulation | |
| Text withEEA relevance | |
 | |
| Title | Regulation (EU) 2022/2065 of the European Parliament and of the Council of 19 October 2022 on a Single Market For Digital Services and amending Directive 2000/31/EC (Digital Services Act) |
|---|---|
| Made by | European Parliament andCouncil of the European Union |
| Journal reference | OJ L 277, 27 October 2022, p. 1–102 |
| History | |
| European Parliament vote | 5 July 2022 |
| Council Vote | 4 October 2022 |
| Date made | 19 October 2022 |
| Entry into force | 16 November 2022 |
| Preparative texts | |
| Commission proposal | COM/2020/825 final |
| Current legislation | |
TheDigital Services Act[1] (DSA) is anEU regulation that entered into force in 2022, establishing a comprehensive legal framework for digitalservices accountability,content moderation, andplatform transparency across the European Union. It significantly updates theElectronic Commerce Directive 2000 inEU law by introducing graduated obligations based on service size and risk levels,[2][3] and was proposed alongside theDigital Markets Act (DMA).
The DSA applies to all digital intermediary services, including hosting services, online platforms (such associal networks, onlinemarketplaces,pornographic platforms,[4]app stores), andsearch engines.[5] It establishes a tiered regulatory approach: basic obligations for all services, enhanced duties for online platforms, and the most stringent requirements for Very Large Online Platforms (VLOPs) and Very Large Online Search Engines (VLOSEs) with over 45 million monthly active users in the EU.[6]
Ursula von der Leyen proposed a "new Digital Services Act" in her 2019 bid for the European Commission's presidency.[7]
The expressed purpose of the DSA was to update the European Union's legal framework for illegal content on intermediaries, in particular by modernising thee-Commerce Directive that had been adopted in 2000. In doing so, the DSA aimed to harmonise different national laws in the European Union that have emerged to address illegal content at national level.[2] Most prominent amongst these laws was the GermanNetzDG, and similar laws in Austria ("Kommunikationsplattformen-Gesetz") and France ("Loi Avia"). With the adoption of the Digital Services Act at European level, those national laws were planned to be overridden and would have to be amended.[8]
In practice, this would lead to new legislation regarding illegal content, transparent advertising and disinformation.[3][needs update]
The DSA is meant to "govern the content moderation practices of social media platforms" and address illegal content.[9] It is organised in five chapters, with the most important chapters regulating the liability exemption of intermediaries (Chapter 2), the obligations on intermediaries (Chapter 3), and the cooperation and enforcement framework between the commission and national authorities (Chapter 4).
The DSA proposal maintains the current rule according to which companies that host others' data become liable when informed that this data is illegal.[9] This so-called "conditional liability exemption" is fundamentally different[10][11] from the broad immunities given to intermediaries under the equivalent rule ("Section 230 CDA") in the United States.
The DSA applies to intermediary service providers that offer their services to users based in the European Union, irrespective of whether the intermediary service provider is established in the European Union.[12]
In addition to the liability exemptions, the DSA introduces a wide-ranging set of new obligations on platforms, including some that aim to disclose to regulators how their algorithms work, while other obligations aim to create transparency on how decisions to remove content are taken and on the way advertisers target users. TheEuropean Centre for Algorithmic Transparency was created by the European Commission to aid the enforcement of this.[13] The European Commission also hosts a DSA Transparency Database for platforms to submit explanations for their moderation decisions as required under the Act.[14]
Article 40 of the DSA requires platforms to grant data access to researchers and non-profit organisations in order to detect, identify and understand systemic risks in the European Union.[15] As of 29 October 2025 the delegated act specifying procedures for data accesscame into force and researchers can now apply.[16] Implementation of Article 40 and compliance with data access requests is being monitored by the Data Access Collaboratory, a joint project of the European New School of Digital Studies at theEuropean University Viadrina and theWeizenbaum Institute in Germany.[17]
A December 2020Time article said that while many of its provisions only apply to platforms which have more than 45 million users in theEuropean Union, the Act could have repercussions beyond Europe. Platforms includingFacebook,Twitter,TikTok, and Google's subsidiaryYouTube would meet that threshold and be subjected to the new obligations.[18]
A 16 November 2021Internet Policy Review listed some of the new obligations, including mandatory "notice-and-action" requirements – for example, respect for fundamental rights, mandatory redress for content removal decisions, and a comprehensive risk management and audit framework.[19]
Companies that do not comply with the new obligations risk fines of up to 6% on their global annual turnover. In addition, the Commission can apply periodic penalties up to 5% of the average daily worldwide turnover for each day of delay in complying with remedies, interim measures, and commitments. As a last resort measure, if the infringement persists and causes serious harm to users and entails criminal offences involving threat to persons' life or safety, the Commission can request the temporary suspension of the service.[20]
Users can contest moderation decisions by online platforms restricting their accounts or sanctioning their content in several ways. This right also applies to notices of illegal content that were rejected by the platform. According to the DSA, users may appeal through the internal complaint-handling system of platforms. Platforms are required to promptly review their decisions.
The DSA also gives users the right to turn to out-of-court dispute settlement (ODS) bodies, if they think a decision by an online platform was wrong.[21] Users may select any entity that has been certified as a dispute settlement body in the EU for their type of dispute and request a review of a platform's content moderation decision. One out-of-court dispute settlement body is Appeals Centre Europe (initially funded by the Oversight Board Trust),[22] which reviews decisions by Facebook, Instagram, Tiktok, Pinterest, Threads and YouTube at no cost for users.[21][23]
For the user, dispute settlement will usually be available free of charge or at a low cost. If the body settles the dispute in favour of the user, the online platform must bear all the fees. Users are advised to review information on applicable fees on the website of the respective body before lodging a request for dispute settlement.
Dispute settlement bodies do not have the power to impose a binding settlement of the dispute on the parties, but platforms and users are required to engage with them in good faith.[21]
TheEuropean Commission submitted the DSA alongside theDigital Markets Act (DMA) to theEuropean Parliament and theCouncil on 15 December 2020.[5][24] The DSA was prepared byvon der Leyen Commission membersMargrethe Vestager (Executive Vice President of the European Commission for A Europe Fit for the Digital Age) andThierry Breton (European Commissioner for Internal Market).[25]
The Digital Services Act builds in large parts on the non-binding Commission Recommendation (EU) 2018/314 of 1 March 2018[26] when it comes to illegal content on platforms. However, it goes further in addressing topics such as disinformation and other risks especially on very large online platforms. As part of the preparatory phase, the European Commission launched a public consultation on the package to gather evidence between July and September 2020.[27][28] An impact assessment was published alongside the proposal on 15 December 2020 with the relevant evidence base.[29]
The European Parliament appointed Danish Social DemocratChristel Schaldemose as rapporteur for the Digital Services Act. On 20 January 2022 the Parliament voted to introduce amendments in the DSA for tracking-free advertising and a ban on using a minor's data for targeted ads, as well as a new right for users to seek compensation for damages.[30] In the wake of theFacebook Files revelations and a hearing by Facebook WhistleblowerFrances Haugen in the European Parliament,[31] the European Parliament also strengthened the rules on fighting disinformation and harmful content, as well as tougher auditing requirements.[32]
The Council of the European Union adopted its position on 25 November 2021.[33] The most significant changes introduced by the Member States are to entrust the European Commission with the enforcement of the new rules on VLOPs and VLOSEs, in the wake of allegations and complaints that theIrish Data Protection Commissioner was not effectively enforcing the EU'sdata protection rules against many platform companies domiciled in Ireland.[34][35]
With Russia using social media platforms to spread misinformation about the2022 Russian invasion of Ukraine, European policymakers felt a greater sense of urgency to move the legislation forward to ensure that major tech platforms were transparent and properly regulated, according toThe Washington Post.[36] On 22 April 2022, the Council of the European Union and the European Parliament reached a deal on the Digital Services Act in Brussels following sixteen hours of negotiations.[37][38][39] According toThe Washington Post, the agreement reached in Brussels solidifies the two-bill plan— the Digital Services Act and the Digital Markets Act, a law regulating competition. The latter is aimed at preventing abuse of power against smaller competitors by larger "gatekeepers".[36]
On 5 July 2022, the European Parliament approved both the DSA and the DMA.[40] Following this, on 4 October 2022, the Council gave its final approval to the DSA.[41] The DSA was adopted on 19 October 2022 and was published in theOfficial Journal of the European Union on 27 October 2022.[1] Itcame into force on 16 November 2022.[42] Most services were given 15 months to comply with its provisions (until 17 February 2024[43]). However, VLOPs and VLOSEs, after their designation as such, had only four months to comply (until 23 August 2023).[40]
The DSA was passed alongside theDigital Markets Act and the Democracy Action Plan.[44] The latter of these is focused on addressing the nuanced legal interpretation of free speech on digital platforms, a fundamental right that has been extensively guided by theEuropean Court of Human Rights (ECtHR) and theEuropean Convention on Human Rights.[45] Accordingly, the Democracy Action Plan, and subsequently the DSA, were strongly influenced by theDelfi AS v. Estonia andMagyar Tartalomszolgáltatók Egyesülete and Index.hu Zrt v. Hungary ECtHR cases, which outlined a framework for assessing intermediary liability on digital platforms.[46]
InDelfi AS v. Estonia, the ECtHR applied proportionality analysis when considering whether the Estonian courts' decision to hold the online platform Delfi liable for hate speech posted by its users was a proportionate restriction on Delfi's right to freedom of expression.[47] The court found that, given the serious nature of the hate speech, the Estonian courts' actions were justified to protect the rights of others.[48] In other words, the ECtHR upheld the liability of online platforms for hate speech posted by their users, underlining that platforms could be expected to take proactive steps to control content when there is a clear risk of harm from unlawful comments. This case highlighted the responsibilities of platforms to prevent the spread of harmful content.[47]
On the other hand, theMTE and Index.hu v. Hungary case illustrated the nuanced limits of freedom of speech on digital platforms.[49] In its application of proportionality analysis, the ECtHR found that the Hungarian courts had failed to strike a fair balance between protecting reputation and ensuring freedom of expression.[50] The Hungarian courts imposed strict liability on the platforms for user comments that were offensive but did not constitute hate speech, constituting a disproportionate interference in the platforms' right to freedom of expression. The ECtHR ruled that imposing strict liability on platforms for user comments, without consideration of the nature of the comments or the context in which they were made, could infringe on freedom of expression. This judgment emphasized the need for a balance between protecting reputation and upholding free speech on digital platforms.[49]
These decisions by the ECtHR provided critical legal precedents that shaped the EU's decision-making process on the framework of the DSA. In particular, the DSA drew from the ECtHR's distinction between different types of illegal content, as well as its proportionality analysis in both cases, by incorporating nuanced rules on intermediary liability and ensuring that measures taken by platforms do not unreasonably restrict users' freedom of expression and information.[51]
The DSA establishes a two-tiered "hybrid enforcement framework" where the rules are enforced both by the European Commission and the national authorities in each EU member state. The Commission is primarily responsible for the enforcement in relation to designated very large online platforms (VLOPs) and very large online search engines (VLOSEs), while the competent national authorities enforce the DSA rules on other intermediary service providers that have been established in their respective territories.[52]
Each member state has to designate a Digital Services Coordinator (DSC), an independent authority that is principally responsible for the DSA enforcement in the member state, and they may also appoint additional national authorities to assist the DSCs in specific tasks. The DSA establishes a number of co-operation mechanisms between the DSCs, including joint investigations. The Commission, DSCs and other national compentent authorities form the European Board for Digital Services (EBDS) which is tasked to coordinate and support DSA enforcement work. However, the EBDS may not take binding decisions.[52]
Similar hybrid enforcement frameworks have been created in other policy fields as well, notably inEU competition policy.[52]
Under the DSA the highest number of rules apply to very large online platforms (VLOPs) and very large online search engines (VLOSEs) that are defined respectively as online platforms and search engines with more than 45 millionmonthly active users in the European Union, corresponding to approximately 10% of the EU population. Platforms are obligated to publicly report the number of active users and to update them at least every six months. The VLOPs and VLOSEs are designated by the Commission on this basis.[53]
On 25 April 2023, the European Commission designated the first 19 VLOPs and VLOSEs under the DSA. The first group of platforms were be required to comply from 25 August 2023.[54] Three further platforms, all of them providing adult content, were added on 20 December 2023.[55] Online retailersShein andTemu were designated as VLOPs in April and May 2024, respectively,[56] while the adult content platform XNXX was added in July 2024.[57]
In July 2023, Amazon and Zalando both initiated proceedings in theGeneral Court challenging the Commission designations, claiming unequal treatment compared to other large retailers, and that their core business models are retail not distributing third party content/products. Zalando argued the criteria and methodology lacked transparency, for instance in how it counts active users, while Amazon said VLOP rules were disproportionate for its business model and asked to be exempted from transparency around targeted ads.[58][59] The General Court dismissed both actions for annulment in late 2025.[60][61] As of November 2025, Zalando has appealed the General Court judgement to theCourt of Justice.[62]
| Service | Parent | Type | Designated on | Designation terminated on |
|---|---|---|---|---|
| AliExpress | Alibaba Group | VLOP | 25 April 2023 | |
| Amazon Store | Amazon | VLOP | 25 April 2023 | |
| App Store | Apple Inc. | VLOP | 25 April 2023 | |
| Bing | Microsoft | VLOSE | 25 April 2023 | |
| Booking.com | Booking Holdings | VLOP | 25 April 2023 | |
| Meta Platforms | VLOP | 25 April 2023 | ||
| Google Play | VLOP | 25 April 2023 | ||
| Google Maps | VLOP | 25 April 2023 | ||
| Google Search | VLOSE | 25 April 2023 | ||
| Google Shopping | VLOP | 25 April 2023 | ||
| Meta Platforms | VLOP | 25 April 2023 | ||
| Microsoft | VLOP | 25 April 2023 | ||
| Pinterest, Inc. | VLOP | 25 April 2023 | ||
| Pornhub | Aylo | VLOP | 20 December 2023 | |
| Shein | Roadget Business Pte. Ltd. | VLOP | 26 April 2024 | |
| Snapchat | Snap Inc. | VLOP | 25 April 2023 | |
| Stripchat | Technius Ltd. | VLOP | 20 December 2023 | 27 May 2025 |
| Temu | PDD Holdings | VLOP | 31 May 2024 | |
| TikTok | ByteDance | VLOP | 25 April 2023 | |
| Wikipedia | Wikimedia Foundation | VLOP | 25 April 2023 | |
| X (formerly Twitter) | X Corp. | VLOP | 25 April 2023 | |
| XNXX | WGCZ Holding | VLOP | 10 July 2024 | |
| XVideos | WGCZ Holding | VLOP | 20 December 2023 | |
| YouTube | VLOP | 25 April 2023 | ||
| Zalando | Zalando SE | VLOP | 25 April 2023 |
When the European Commission suspects infringement of the DSA by a VLOP or VLOSE it may start an investigation. The Commission is empowered to send information requests, order access to data or algorithms, and to conduct inspections on the premises of the VLOP or VLOSE under investigation. The Commission is obligated to give the concerned VLOP or VLOSE the opportunity of being heard on their preliminary findings and on intended measures to be taken before the Commission may adopt any decision.[20]
As of November 2025, the European Commission has started 14 investigations into DSA compliance of VLOPS or VLOSEs. The platforms under ongoing or finished investigations by the Commission include AliExpress, Facebook, Instagram, Temu, TikTok, and X, as well as a number of pornographic platforms.[64][65]
On 5 August 2024, the Commission accepted commitments byByteDance to permanently withdrawTikTok Lite from the EU markets. The platform alternative included a "task and reward" feature letting users earn points by using the app, where the points could be exchanged for Amazon vouchers. The Commission's concern was that the feature could beaddictive for minors, negative affecting theirmental health. Formally, the commitments do not mean that TikTok would have been found to have breached the DSA but in case ByteDance fails to comply with them the company could be quickly sanctioned.[66]
On 5 December 2025, the Commission issued its first non-complience decision and fine under the DSA. The Commission found that X had breached DSA's rules ondeceptive design prohibition, ad transparency, and researcher data access, leading to an fine of €120 million ($140 million) and an order to end the infringements within certain time periods. The decision was based on three findings of infringements by the Commission:
According toEuronews, the total fine of €120 million consisted of €45 million for the first finding, €35 million for the second, and €40 for the third. X may appeal the decision before theEU General Court.[67][68][69][70]
 | This section needs to beupdated. The reason given is:nearly all of this is from before the laws went into force (i.e. speculation about their implementation and efforts to change the text). Please help update this article to reflect recent events or newly available information.(October 2025) |
 | The examples and perspective in this sectiondeal primarily with the United States and do not represent aworldwide view of the subject. The specific issue is:European reactions are almost completely lacking. You mayimprove this section, discuss the issue on thetalk page, or create a new section, as appropriate.(December 2025) (Learn how and when to remove this message) |
Reactions to the Digital Services Act have been mixed, with several academics, journalists, and human rights organizations welcoming an effort to regulate platforms and create consumer protections for its users. Others do not see the laws as going far enough, while the companies regulated by the laws and right-wing and libertarian politicians and journalists criticize the extent of its regulation.[71][72] Prior to its implementation, some academics have expressed concerns that the Digital Services Act might be too rigid and prescribed,[73] excessively focused on individual content decisions or vague risk assessments.[74] TheEuropean Federation of Journalists asked EU legislators to further increase the transparency of platforms' recommendation systems via the DSA.[75]Mike Masnick criticised the act for not including provisions that would have required a court order for the removal of illegal content.[76]
The DSA was welcomed by some EU media.[77] In January 2022, the editorial board ofThe Washington Post stated that the U.S. could learn from these rules,[78] while Frances Haugen stated that it could set a "gold standard" of regulation worldwide.[79] Tech journalistCasey Newton has argued that the DSA will shape US tech policy.[80] Mike Masnick ofTechdirt praised the DSA for ensuring the right to pay for digital services anonymously.[76]
Civil Society organisations such asElectronic Frontier Foundation have called for stronger privacy protections.[81]Human Rights Watch has welcomed the transparency and user remedies but called for an end to abusive surveillance and profiling.[82]Amnesty International has welcomed many aspects of the proposal in terms of fundamental rights balance, but also asked for further restrictions on advertising.[83] Advocacy organisationAvaaz has compared the Digital Services Act to the Paris Agreement for climate change.[84]
Following the2023 Hamas-led attack on Israel,Thierry Breton wrote public letters toX,Meta Platforms,TikTok, andYouTube on how their platforms complied with the DSA regarding content related to the conflict and upcoming elections. TheAtlantic Council's Digital Forensic Research Lab reported that Breton's letters did not follow DSA processes, and digital rights groupAccess Now criticised Breton's letters for drawing a "false equivalence" between illegal content and disinformation.[85]
Tech companies have frequently criticized the Digital Services Act (DSA) for what they consider to be burdensome regulations and lack of clarity.[86] They have also faced accusations of lobbying to weaken some of the DSA's more stringent provisions, particularly those related to bans on targeted advertising.[87] Notably, Google CEO Sundar Pichai issued a high-profile apology to EU Commissioner Thierry Breton after a leaked internal document revealed Google's 60-day strategy to lobby against the DSA, including efforts to enlist U.S. allies to oppose Breton's regulatory push.[88]
US politicians charged that the legislation unfairly targets US-based companies and,[89][90] in 2025, several officials in the Trump administration, most notablyJD Vance, began alleging the DSA was being used for "censoring free speech and targeting political opponents".[91] His statements were contested by, among others,Michael McFaul, formerly U.S. ambassador to Russia, who toldPolitico Vance's remarks were "insulting" and "just empirically not true".[92] Another critic of Vance's speech was the German Defense Minister at that time,Boris Pistorius, who called Vance's remarks about Europe "not acceptable".[93] Libertarian professorMarcello Ferrada de Noli expressed concern that the DSA could enable censorship if regulations permit the classification of journalistic or dissident critiques of European Union leadership as hate speech.[94]
On 23 December 2025, United States secretary of stateMarco Rubio sanctioned former commissionerThierry Breton, who led the drafting of the legislative proposal. Despite the fact that Breton left his office in September 2024, Breton's U.S. assets are frozen, and he ispersona non grata in theUnited States, thus forbidden to enter theterritories of the United States by theTrump administration,[95] "over what it said was 'censorship' and coercion of US social media platforms".[96]The Guardian reported that "the sanctions are being seen as the latest attack on European regulations that target hate speech and misinformation".[97]
In January 2026, Polish presidentKarol Nawrocki refused to sign, thus effectively vetoing, a bill that would designate a responsible authority for DSA enforcement in Poland.[98] Nawrocki said regarding his decision, "The most effective way to take away freedom is not by banning speech, but by imposing a single, officially accepted version of reality," and that "Orwell’sMinistry of Truth is a warning symbol."[99]
After the first round of the2024 Romanian presidential election was invalidated due to reports allegedly showing Russian involvement on TikTok in favor ofCălin Georgescu, an investigation was conducted to determine whether TikTok had breached the DSA.[100]
In August 2024,TikTok agreed to withdraw its TikTok Lite rewards feature after it was investigated under the DSA due to concerns about its "addictive effect", especially for children.[101][102]
A 2024 study of deleted Facebook and YouTube comments by the Future of Free Speech think tank atVanderbilt University suggested that "platforms, pages, or channels may be over-removing content to avoid regulatory penalties" under the DSA.[103]
The Washington Post wrote in 2023 that tech companies may apply features instituted to comply with the DSA to countries outside of the EU, and that researchers have argued that the DSA could provide a framework for the United States to impose stricter regulations on tech companies.[104]The Economist wrote in 2023 that theBrussels effect, whereby social media platforms implement EU regulations globally to save costs, "is far from guaranteed" with the DSA due to tech companies being unwilling to "[lose] sovereignty over their digital territories everywhere".[105]
Among legal academics, Dawn Nunziato of theGeorge Washington University argued in 2022 that the DSA "will further instantiate the Brussels effect, whereby EU regulators wield powerful influence on how social media platforms moderate content on the global scale".[106] Suzanne Vergnolle of theConservatoire national des arts et métiers stated her belief in 2023 that the DSA would have a Brussels effect similar to that of theGeneral Data Protection Regulation, but that "it's going to take years".[107] Martin Husovec of theLondon School of Economics and Jennifer Urban of theUniversity of California, Berkeley wrote in 2024 that "the chances of spontaneous voluntary implementation beyond the EU's borders for four key parts of the DSA – content moderation procedures, transparency and governance obligations, and risk management rules – seem modest."[108]
The 2023 BrazilianFake News Bill, a proposed new social media regulation framework introduced in theNational Congress, heavily referenced the DSA and contained similar provisions.[109][110]
(Vance) took a swipe at European governments for what he described as their censorship of free speech and their political opponents.
The Brazilian proposal is shaping up to be one of the world's strongest legislations on social media, comparable to the European Union's Digital Services Act enacted last year.
