European Commission unveils Digital Services Act proposal

Quick summary

On 15 December 2020, the European Commission published the Digital Services Act proposal, introducing full due diligence rules for online platforms and hosting services. The DSA establishes tiered obligations based on service type and size, with the most stringent requirements—including risk assessments and algorithmic transparency—applying to very large platforms reaching over 45 million EU users.

Regulatory Context

The DSA modernizes the e-Commerce Directive framework:

• Platform evolution: Online platforms have evolved beyond passive hosting to active content curation and recommendation.
• Content moderation: Inconsistent platform practices create uncertainty for users and businesses.
• Illegal content: Platforms face pressure to address illegal content while respecting fundamental rights.
• Systemic risks: Very large platforms can amplify harmful content affecting democratic processes and public health.

Tiered Obligations

The DSA establishes graduated requirements:

All intermediary services:

• Transparency reporting on content moderation.
• Terms of service compliance.
• Cooperation with authorities.

Hosting services:

• Notice-and-action mechanisms for illegal content.
• Statement of reasons for content removal.
• Counter-notice procedures.

Online platforms:

• Internal complaint handling systems.
• Out-of-court dispute resolution access.
• Trusted flagger relationships.
• Advertising transparency.
• Recommender system transparency.

Very Large Platform Obligations

Platforms with 45+ million EU users face improved requirements:

• Risk assessments: Annual assessments of systemic risks including illegal content amplification, fundamental rights impacts, public health threats, and electoral manipulation.
• Mitigation measures: Implementation of measures addressing identified risks.
• Independent audits: Annual independent compliance audits.
• Researcher data access: Providing data access to vetted researchers studying systemic risks.
• Crisis protocols: Emergency response procedures activatable by Commission.

Algorithmic Transparency

Platforms must provide transparency about recommendation systems:

• Explain main parameters used in recommendation algorithms.
• Provide user controls over personalization.
• Offer non-personalized recommendation options.
• Disclose when content is promoted through advertising.

Advertising Requirements

Platforms must implement advertising transparency:

• Clear marking of content as advertising.
• Disclosure of advertiser identity.
• Explanation of targeting parameters.
• Advertising repository access for researchers.

Enforcement Framework

The DSA establishes coordinated enforcement:

• Digital Services Coordinators: Member state authorities enforce DSA requirements.
• Commission oversight: Direct supervision of very large platforms.
• Penalties: Up to 6% of global annual turnover for violations.
• Periodic penalties: Up to 5% of daily turnover for continuing violations.

Compliance Planning

If you are affected, assess DSA applicability, map existing content moderation practices against requirements, and plan for risk assessment and transparency obligations applicable to their service category.

Final assessment

The DSA establishes full platform accountability requirements addressing content moderation, algorithmic transparency, and systemic risks. If you are affected, monitor legislative negotiations and begin compliance planning for requirements applicable to their service type and user base.

Detailed guidance

Successful implementation requires a structured approach that addresses technical, operational, and organizational considerations. Organizations should establish dedicated implementation teams with clear responsibilities and sufficient authority to drive necessary changes across the enterprise.

Project governance should include regular status reviews, risk assessments, and stakeholder communications. Executive sponsorship is essential for securing resources and removing organizational barriers that might impede progress.

Change management practices help ensure smooth transitions and stakeholder acceptance. Training programs, communication plans, and feedback mechanisms all contribute to effective change management outcomes.

Assurance and verification

Compliance verification involves systematic evaluation of implemented controls against applicable requirements. Organizations should establish verification procedures that provide objective evidence of compliance status and identify areas requiring remediation.

Internal audit functions play an important role in providing independent assurance over compliance activities. Audit plans should incorporate risk-based prioritization and coordination with external audit requirements where applicable.

Continuous compliance monitoring capabilities enable early detection of control failures or compliance drift. Automated monitoring tools can provide real-time visibility into compliance status across multiple control domains.

Working with vendors

Third-party relationships require careful management to ensure compliance obligations are properly addressed throughout the vendor ecosystem. Due diligence procedures should evaluate vendor compliance capabilities before engagement.

Contractual provisions should clearly allocate compliance responsibilities and establish appropriate oversight mechanisms. Service level agreements should address compliance-relevant performance metrics and reporting requirements.

Ongoing vendor monitoring ensures continued compliance throughout the relationship lifecycle. Periodic assessments, audit rights, and incident response procedures all contribute to effective third-party risk management.

What planners should consider

Strategic alignment ensures that compliance initiatives support broader organizational objectives while addressing regulatory requirements. Leadership should evaluate how this development affects competitive positioning, operational efficiency, and stakeholder relationships.

Resource planning should account for both immediate implementation needs and ongoing operational requirements. Organizations should develop realistic timelines that balance urgency with practical constraints on resource availability and organizational capacity for change.

How to measure progress

Effective monitoring programs provide visibility into compliance status and control effectiveness. Key performance indicators should be established for critical control areas, with regular reporting to appropriate stakeholders.

Metrics should address both compliance outcomes and process efficiency, enabling continuous improvement of compliance operations. Trend analysis helps identify emerging issues and evaluate the impact of improvement initiatives.

Strategic impact

This development carries significant strategic implications for organizations across multiple sectors. Business leaders should evaluate how these changes affect their competitive positioning, operational models, and stakeholder relationships. Early adopters who address emerging requirements often gain advantages over competitors who delay action until compliance becomes mandatory.

Strategic planning should incorporate scenario analysis that considers various implementation approaches and their associated costs, benefits, and risks. Organizations should also consider how their response to this development affects relationships with customers, partners, regulators, and other key stakeholders.

Excellence in operations

Achieving operational excellence in response to this development requires systematic attention to process design, technology enablement, and workforce capabilities. Organizations should establish clear operational metrics that track both compliance outcomes and process efficiency, enabling continuous improvement over time.

Operational processes should be designed with appropriate controls, checkpoints, and escalation procedures to ensure consistent execution and timely issue resolution. Automation opportunities should be evaluated and prioritized based on their potential to improve accuracy, reduce costs, and enhance scalability.

How governance applies

Effective governance ensures appropriate oversight of compliance activities and timely escalation of significant issues. Organizations should establish clear roles, responsibilities, and accountability structures that align with their compliance objectives and risk appetite.

Regular reporting to senior leadership and board-level committees provides visibility into compliance status and supports informed decision-making about resource allocation and risk management priorities.

Sustaining progress

Compliance programs should incorporate mechanisms for continuous improvement based on lessons learned, emerging best practices, and evolving requirements. Regular program assessments help identify enhancement opportunities and ensure sustained effectiveness over time.

Organizations that approach this development strategically, with appropriate attention to governance, risk management, and operational excellence, will be well-positioned to achieve compliance objectives while supporting broader business goals.

Related articles

Curated signals from the same pillar or overlapping topics.

Policy · Credibility 71/100 · June 2, 2020

European Commission opens consultation on Digital Services and Markets Acts

The European Commission launched public consultations on the forthcoming Digital Services Act and Digital Markets Act on 2 June 2020, seeking input on platform accountability, competition rules, and enforcement options.

Policy · Credibility 71/100 · July 5, 2022

European Parliament adopts the Digital Services Act

The European Parliament formally adopted the Digital Services Act on 5 July 2022, confirming sweeping platform liability, recommender transparency, and systemic risk mitigation duties ahead of Council approval and…

Policy · Credibility 71/100 · September 19, 2023

UK Online Safety Bill clears Parliament

The UK Online Safety Bill passed after years of debate. Platforms face content moderation duties, age verification requirements, and significant fines. The encryption provisions remain controversial.

Policy · Credibility 92/100 · December 15, 2020

EU Digital Services & Markets Acts Proposed

The European Commission unveiled the Digital Services Act and Digital Markets Act proposals to modernize platform liability, content governance, and gatekeeper obligations across the single market.

Policy · Credibility 71/100 · December 15, 2020

European Commission proposes Digital Markets Act

The European Commission unveiled the draft Digital Markets Act on 15 December 2020, introducing ex-ante obligations for large online platforms designated as gatekeepers.

Continue in the Policy pillar

Return to the hub for curated research and deep-dive guides.

Visit pillar hub

Latest guides

• AI Policy Implementation Guide

  Coordinate governance, safety, and reporting programmes that meet EU Artificial Intelligence Act timelines and U.S. National AI Initiative Act mandates while sustaining product…

• Digital Markets Compliance Guide

  Implement EU Digital Markets Act, EU Digital Services Act, UK Digital Markets, Competition and Consumers Act, and U.S. Sherman Act requirements with cross-functional operating…

• Semiconductor Industrial Strategy Policy Guide

  Coordinate CHIPS and Science Act, EU Chips Act, and Defense Production Act programmes with capital planning, compliance, and supplier readiness.

Coverage intelligence

Published

December 15, 2020

Coverage pillar

Policy

Source credibility

71/100 — medium confidence

Topics

Digital Services Act · platform regulation · risk assessments · content moderation

Sources cited

2 sources (iso.org, crsreports.congress.gov)

Reading time

5 min

References

1. Industry Standards and Best Practices — International Organization for Standardization
2. Congressional Research Service Analysis