Digital Services Act (DSA)
Also known as: DSA, EU Digital Services Act, Regulation (EU) 2022/2065
The Digital Services Act (DSA) is the EU law that sets rules for online intermediaries and platforms, from hosting services to social networks and marketplaces, covering illegal content, ad transparency, and protection of minors.
While earlier EU rules mainly shielded platforms from liability, the DSA adds duties that scale with size. The largest platforms face the heaviest obligations, including independent audits and fines of up to 6% of global turnover.
Digital Services Act (DSA), explained at three levels
At home
Think of the DSA as building codes for online platforms. Small sites follow basic rules, while the biggest platforms, like skyscrapers, face the strictest inspections. For you, that means easy ways to report illegal content, an explanation when your post or account is restricted, a way to appeal, and labels showing who paid for an ad and why you're seeing it.
At work
The DSA is the EU regulation that governs online intermediaries, from internet access providers and hosting services to social networks, marketplaces, and search engines. It sets rules for handling illegal content, explaining moderation decisions, and making advertising transparent, with duties that grow with a service's size. Businesses care because any platform serving EU users is covered, and the largest face fines of up to 6% of global turnover.
At home
The DSA's user protections work through design rules. Platforms cannot target ads using sensitive data such as religion, health, or sexual orientation, and cannot show profiling-based ads to users they know are minors. Every ad must show who paid for it and the main reasons you're seeing it. Very large platforms must also offer at least one feed option that isn't based on profiling, such as a chronological timeline, so you can step outside the algorithm.
At work
Obligations stack in four tiers. All intermediaries need points of contact, a legal representative if based outside the EU, and clear terms. Hosting services add notice-and-action systems and statements of reasons for removals. Online platforms add internal complaint handling, out-of-court dispute settlement, trusted flaggers, ad transparency, and seller verification for marketplaces. Very large platforms and search engines, with over 45 million monthly EU users, add risk assessments, independent audits, ad repositories, and data access for vetted researchers.
At home
The DSA also targets 'dark patterns,' interface designs that steer you into choices you didn't intend, such as making one option far more prominent, repeatedly asking you to reconsider, or making cancellation harder than sign-up. Platforms cannot design interfaces that deceive or manipulate users. In my opinion, that rule could matter more than the content moderation provisions, because manipulative design affects everyone every day, while illegal content reaches far fewer people.
At work
Enforcement is split. National Digital Services Coordinators supervise most services, while the European Commission directly supervises very large platforms and search engines, funded by a supervisory fee of up to 0.05% of their worldwide net income. Annual risk assessments must cover illegal content, fundamental rights, civic discourse and elections, public health, and minors, and independent auditors check them. The Commission's first fine, against X in December 2025, showed it will act, but transatlantic political tension adds risk to enforcement.
Real-world examples
At home
Sophie, living in Lyon, had a post removed from a social platform. Under the DSA, the platform had to explain why, and she used the appeal process to challenge the decision. The post was reinstated after human review.
At work
Carlos runs operations at a Canadian online marketplace selling to EU customers. To meet DSA rules, his team set up a way for users to report illegal listings, verified the identities of sellers, and added a page explaining how listings are ranked.
How it compares
| feature | Digital Services Act (DSA) | Digital Markets Act (DMA) |
|---|---|---|
| Focus | Content, transparency, and user safety | Competition and fair markets |
| Who is covered | All intermediaries, scaled by size | Only designated gatekeepers |
| Maximum fine | 6% of global turnover | 10% of global turnover, 20% for repeat violations |
| Example obligation | Explain content removals and offer appeals | Allow alternative app stores or payment options |
| Fully applicable | February 2024 | May 2023, with gatekeeper compliance from March 2024 |
The DSA governs how platforms treat users and content; the DMA governs how big platforms treat competitors.
For analysts
Even small platforms selling into Europe need a basic DSA setup: a notice-and-action process, clear terms, and seller verification for marketplaces. I'd treat it like accessibility. Build it into the product once, rather than retrofitting it under pressure.
History & origin
The DSA updated the EU's 2000 e-Commerce Directive, which had governed online platforms for two decades. Proposed in December 2020 together with the Digital Markets Act, it entered into force on November 16, 2022. In April 2023, the European Commission designated the first 'very large online platforms' and 'very large online search engines,' those with more than 45 million monthly EU users, and their obligations applied from August 2023. The DSA became fully applicable to all covered services on February 17, 2024. The Commission opened formal proceedings against several platforms, including X, TikTok, and Meta, and issued its first non-compliance fine, against X, in late 2025. In my view, the DSA's real innovation is systemic risk assessment: it asks platforms to prove they've considered the harms their design causes, not just remove bad posts.