The digital landscape is constantly evolving, and with it, the legal framework designed to ensure a safe and transparent online environment. One of the most important legislative developments of recent years is the European Union's Digital Services Act (DSA). This article provides a comprehensive overview of the DSA and explains which businesses fall within its scope, what key obligations apply to them, and what consequences non-compliance can have.
What Is the EU Digital Services Act?
The Digital Services Act (DSA) is a legal framework proposed by the European Commission that aims to create a safer digital space in which users' fundamental rights are protected, while also establishing a level playing field for businesses operating online. Adopted in December 2020, the DSA represents a substantial revision of the existing E-Commerce Directive, which has been in force since 2000.
The DSA's main goals are to increase the transparency and accountability of online platforms, combat illegal content, protect users' fundamental rights online, and promote innovation and competition in the digital market. In doing so, the DSA aims to modernize the legal framework for digital services and address the challenges arising from the rapid growth of the digital economy.
Which Businesses Fall Under the DSA?
The DSA applies to a wide range of digital services provided within the EU, regardless of where the provider is established. These services are divided into four main categories:
- Intermediary services: These include network infrastructure providers such as internet access providers and domain name registrars.
- Hosting services: This category covers services that store information provided by users, including cloud storage and web hosting services.
- Online platforms: Online platforms facilitate interaction between users and include social media platforms, marketplaces, and app stores.
- Very large online platforms (VLOPs): These are online platforms with significant reach, specifically more than 45 million monthly active users in the EU.
Obligations under the DSA vary depending on the type and size of the service, with larger platforms facing stricter requirements due to their greater impact on society and the economy.
Key Obligations for Businesses
The DSA imposes several obligations on businesses offering digital services, designed to ensure transparency, accountability, and user protection. Key obligations include:
- Transparent reporting: Providers of digital services must publish annual transparency reports detailing their content moderation activities, including the number of illegal content items removed and the measures taken against misleading advertising.
- Removal of illegal content: Businesses must establish mechanisms that let users report illegal content, and they are required to act promptly to remove such content or block access to it. This also includes providing affected users with clear reasons for the removal of content.
- User complaint mechanisms: Platforms must offer users accessible complaint mechanisms to challenge decisions about content removal or account suspension. Platforms must also cooperate with trusted flaggers who can identify illegal content more efficiently.
- Risk assessment and mitigation: Very large online platforms are required to conduct risk assessments regarding the spread of illegal content, impacts on fundamental rights, and potential harm to society. They must take measures to mitigate these risks, which may include changes to their algorithms or terms of service.
- Advertising transparency: Online platforms must ensure that users can easily recognize advertising and understand why it's being targeted at them. This includes providing information about the advertiser and the parameters used to target specific ads.
- Data access for researchers: To promote transparency and accountability, VLOPs must give vetted researchers access to their data so they can study systemic risks and the effects of platform policies.
Potential Consequences of Non-Compliance
Non-compliance with the DSA can have serious consequences for businesses, both financially and reputationally. The European Commission is authorized to enforce the DSA and impose sanctions on businesses that fail to meet their obligations. Key consequences include:
- Fines: Businesses can be fined up to 6% of their global annual revenue. For very large online platforms, this can amount to billions of euros, making compliance an economic necessity.
- Periodic penalties: In addition to fines, the DSA provides for periodic penalties in cases of continued non-compliance, giving businesses an incentive to address issues promptly and sustainably.
- Access restrictions: In extreme cases of persistent non-compliance, the DSA grants authorities the power to petition courts to order temporary or permanent restrictions on access to the service within the EU.
- Reputational damage: Non-compliance can cause significant reputational harm, as transparency reports and enforcement actions are made public. This can lead to a loss of user trust, negative media coverage, and a decline in user base and market share.
Increased scrutiny: Businesses that fail to comply with the DSA could face increased scrutiny from regulators, resulting in more frequent audits and investigations that further strain resources and operational capacity.
Conclusion
The Digital Services Act is a landmark regulation aimed at creating a safer and more transparent digital environment in the EU. Businesses operating in the EU need to understand their obligations under the DSA and take proactive steps to ensure compliance. By doing so, they can not only avoid substantial fines and penalties but also foster a trustworthy, user-centric digital ecosystem. As a legal advisor, it's essential to guide your clients through this complex regulatory landscape and help them take the necessary steps to comply with the DSA and leverage its benefits for their business.
