DSA
in English: Digital Services Act
An EU law that prescribes how online platforms must handle illegal content, advertisements, recommendation algorithms, and user complaints.
In plain terms
The DSA is the rulebook for internet platforms, except it was not written by the platform but by the EU. It is like market supervision rules for a market hall: it does not dictate who can sell what, but rather what the hall operator must do if someone offers spoiled goods or counterfeits.
The regulation does not specify what counts as illegal (that is decided by member state and EU laws), but how the platform must act. It requires a reporting button, justification for deletions and bans, and the possibility to appeal.
It matters for AI because algorithms curate your news feed, search results and ads. Under the DSA, a platform must disclose what it bases a recommendation on, and the largest platforms must also offer a feed that is not built on a profile of you.
The rules are tiered: the larger a service, the more obligations it has. The strictest requirements apply to giant platforms and search engines that have at least 45 million average monthly active users in the EU and have been officially designated as such by the European Commission.
How it works
- Classification: the regulation categorizes providers by size and role, from hosting services to marketplaces to giant platforms, with a different set of obligations applying to each.
- Notification and action: anyone can report content deemed illegal, and the platform must deal with it substantively. If it deletes or restricts, it must send an explanation to the affected party.
- Legal remedy: you can file a free internal complaint against the decision, and if this yields no result, you may turn to an out-of-court dispute resolution body or a court.
- Risk management: giant platforms and the largest search engines must annually assess what social risks they cause (for example, disinformation, protection of minors, manipulated content), reduce them, and submit to independent audits.
- Oversight and fines: very large platforms and the largest search engines are primarily supervised by the European Commission, while other providers are overseen by the digital services coordinator of the EU member state where the company has its EU headquarters (in Hungary, this authority is the National Media and Infocommunications Authority, NMHH). Fines can reach up to 6 percent of annual global turnover.
An everyday example
A social media platform deletes your post, and you do not understand why. Under the DSA, the platform must state which rule or law it cited for the decision, whether it used automated tools, and how you can challenge the decision. If you disagree, you can appeal.
Who is affected
A common misconception
Limits and risks
- A regulation is only as good as its enforcement: proceedings against giant platforms can drag on for years, during which the service may continue to operate unchanged.
- The DSA does not guarantee that reported content will be removed: the platform only needs to meaningfully assess it and justify its decision.
- Private messaging and smaller providers are subject to far fewer obligations, so problematic content may migrate there.
- The regulation does not provide specific rules for AI chatbots and autonomous AI agents, so it is disputed when and to what extent they fall under it.
Similar, but not the same
- DMA (Digital Markets Act) – The DMA regulates the market dominance of the largest tech companies and fair competition, while the DSA governs content management and user protection.
- EU AI Act (MI-rendelet) – The AI Act regulates the AI systems themselves according to their risk, while the DSA covers the platforms where these algorithms and generated content appear.
- GDPR – The GDPR concerns the processing of your personal data; the DSA concerns platforms' responsibilities for content management, advertising, and transparency.
Related concepts
EU digital regulation, Platform regulation
Very Large Online Platform (VLOP), Content moderation, Recommendation system, Trusted flagger
DMA (Digital Markets Act), EU AI Act (MI-rendelet), GDPR, Deepfake, Disinformation
A brief history
The European Commission proposed the regulation in December 2020; it was adopted in October 2022 (Regulation (EU) 2022/2065) and entered into force on 16 November 2022. It has applied to the first designated very large platforms and search engines since the end of August 2023, and to all covered providers since 17 February 2024.
Where things stand
The regulation has applied to all affected service providers in the EU since February 2024. The Commission is conducting proceedings against several very large platforms, and in December 2025 it imposed the first fine: €120 million on X. At the end of 2026, the debate centers mainly on the protection of minors, the pace of enforcement, and the classification of generative AI services.
In the news
- Proposed EU KIDS Act targets online platforms, age verification and AI chatbotsOct 19, 2026 · Jog
- EU designates ChatGPT a search engine under the DSA; Reddit and Roblox classed as very large platformsAug 31, 2026 · Jog
Also known as
DSA · Digital Services Act · Digital Services Act · Digital Services Act · Digital Services Act · (EU) 2022/2065 rendelet · EU platform regulation · EU Digital Services Act
Sources
This entry was machine-edited and has undergone machine expert review; the “In the news” section updates automatically from Agent Age stories.