Digital compliance

Digital compliance

Online services under the EU Digital Services Act

The Digital Services Act sets one set of rules across the EU for online services, from hosting providers to marketplaces, social networks and app stores. It aims to make the online environment safer and to protect users’ fundamental rights. We help businesses understand which obligations apply to them and put them into practice.

Legal actRegulation (EU) 2022/2065
In force since16 November 2022
Applies to all services since17 February 2024
Maximum finesUp to 6% of annual worldwide turnover

Who must comply

Obligations grow with the size and role of the service

The DSA applies to all online intermediary services offered in the EU. Each layer adds obligations to the one before it. Micro and small companies benefit from lighter requirements.

1All online services

Clear terms and conditions, points of contact for authorities and users, and transparency about content moderation.

2Hosting services

A user-friendly way to report illegal content and goods, and a statement of reasons when content is removed or restricted.

3Online platforms and marketplaces

Internal complaint handling, out-of-court dispute settlement, priority for trusted flaggers, no dark patterns, labelled advertising and protection of minors. Marketplaces must also verify and display seller details and make reasonable efforts to check the products offered.

4Very large platforms and search engines

Services with more than 45 million monthly users in the EU must assess and mitigate systemic risks, publish advertising repositories, offer a feed not based on profiling and undergo further transparency and accountability checks.

User rights

What users can expect from platforms

Explanations and appeals

Platforms must explain why content was removed or an account suspended, and users can challenge the decision with the platform or an out-of-court dispute settlement body.

Reporting illegal content

Users can flag illegal content and goods through simple mechanisms, and platforms must act on the reports.

Protection of minors

Platforms must take measures to keep minors safe, and advertising targeted at children based on profiling is banned.

Transparent advertising

Ads must be clearly labelled, and they may not be targeted using sensitive data such as religion, ethnicity or sexual orientation.

No dark patterns

Interfaces that trick users, such as misleading consent buttons, are prohibited.

Choice of feed

Users of very large platforms can choose a recommendation feed that is not based on profiling.

Enforcement

Who supervises the rules

Digital Services Coordinators

National authorities supervise and enforce the DSA for services established in their Member State. Users can lodge complaints with the coordinator in their own country.

European Commission

The Commission enforces the additional obligations of very large online platforms and search engines, including systemic risk management.

How we help

Turning DSA obligations into working processes

The DSA is directly applicable, but supervision and some procedures are national. We combine EU-level analysis with knowledge of how Member States apply the rules.

  1. 01
    ClassificationWhich category your service falls into and which obligations follow from it.
  2. 02
    Terms and noticesTerms and conditions, statements of reasons and transparency information that meet DSA requirements.
  3. 03
    ProcessesNotice-and-action, complaint handling and seller verification for marketplaces.
  4. 04
    Interface and advertising reviewChecking designs and ad practices for dark patterns and prohibited targeting.

Contact

Running an online service in the EU?

Tell us what your service does and where you operate. We will map your DSA obligations and next steps.